Allow PUT in CORS

Allow PUT method in headers for /session/ttl_extend