added CORS for option

Adding in CORs response for options call.