Changed Rack::Cors resources to only allow method :post