What is CORS (Cross-Origin Resource Sharing)? Why does the browser send a preflight request (OPTIONS method) before the main request to the backend?