Handle OPTIONS method for CORS