added OPTIONS handlin for CORS
catching profiling issues even when using exec not profile