Add PUT to the list of default allowed CORS method

[mrioan]

By default our properties have:

stormpath.web.cors.allowed.methods = POST,GET,OPTIONS,DELETE

We want to add PUT to that list.