neolao Allow OPTIONS for policies restricting the method