Add CORS headers to PUT too