Most modern browser will issue a pre-flight request with HTTP OPTION method before the actual asynchronous POST.    This adds a CORS supporting option endpoint.