Add Access-Control-Max-Age to CORS preflight headers

Making a preflight request on every request becomes expensive, since the browser is making two requests for every client registration request. Adding the Access-Control-Max-Age HTTP response header allows the browser to cache the preflight options request and should improve performance.