f3214889dc
See: https://stackoverflow.com/questions/20478312/default-value-for-access-control-allow-methods In particular we now explicitly allow DELETE and PUT which is inconsistently allowed depending on browser