Added additional response headers to OPTIONS call for CORS compatabilty