Browser preflight OPTIONS call fails

[jsandroos]

When callling a deployed /perform endpoint from a browser, RT returns 405: not allowed.

It looks like it is the cors preflight OPTIONS call which is being triggered due to custom headers (E.g X-Racetrack-Auth)

This stems from the api setup function in api.py which implements:
@options.api.post('/perform') def _perform_endpoint(payload: Dict[str, Any] = Body(default=example_input))

This strictly enforces only POST requests.