add test that OPTIONS returns Cache-Control

[wavemechanics]

What

Add a test that an OPTIONS request returns a Access-Control-Allow-Headers header which includes a Cache-Control token.