Sets Access-Control-Allow-Methods response header allowing all HTTP methods

closes #11