added cards cors support for options method being called before post and other http methods