Enhance CORS support

Breaking changes: Bypass access checks for OPTIONS requests


Description
-----------

Change ConfigurationBasedAccessController::getAccess() to always allow OPTIONS requests to be forwarded to the Rou