# handle `OPTIONS` method for `cors` route rule