Missing CORS header for PUT requests

[segli]

When sending a PUT request, the required CORS response headers are missing.

Preflight request:

OPTIONS /api/v1/records/32224674.json HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, br
Accept-Language: de,en;q=0.9,fr;q=0.8
Access-Control-Request-Headers: content-type,x-auth-key,x-auth-user
Access-Control-Request-Method: PUT
Cache-Control: no-cache
Connection: keep-alive
Host: churchmetrics.com
Origin: http://localhost:8080
Pragma: no-cache
Referer: http://localhost:8080/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1

Response:

HTTP/1.1 200 OK
Server: Cowboy
Date: Mon, 28 Nov 2022 13:25:54 GMT
Connection: keep-alive
Transfer-Encoding: chunked
Via: 1.1 vegur

PUT requests work with Curl. POST requests are also working.

Thanks!