BULL-459: add Access-Control-Max-Age header

This will provide the header Access-Control-Max-Age: 5 on OPTIONS requests.