CORS block for POST request

**Describe the bug**
We have POST /bulk request endpoint, but OPTIONS and POST methods are absent in 'Access-Control-Allow-Methods'


**Expected behavior**
Add OPTIONS and POST methods to 'Access-Control-Allow-Methods' if 'enable_bulk_inserts' is true

I guess there might be a reason for this limitation, but what?
