SAM + CORS + Cognito

**Description:**

When I configure my API to use Cognito, it uses Cognito Authorizer in all of the methods. If I'm using CORS and Cognito, the OPTION method is still returning a 401.

**Observed result:**

401 in OPTIONS method

**Expected result:**

OPTIONS method shouldn't return unauthorized.
