$http DELETE with CORS