CORS support adjusted

Access-Control-Allow-Methods adjusted and
Access-Control-Request-Headers added