Fix allowed methods for OPTIONS