Add test for preflight cors