Added action to api/application controller to handle CORS preflight check