Manual backport 46160 (#46722)

* Manual backport 46160

* e2e tests fix

src/metabase/server/middleware/security.clj

@@ -192,6 +192,7 @@
      "Vary"                        "Origin"})
 
    {"Access-Control-Allow-Headers"   "*"
+    "Access-Control-Allow-Methods"   "*"
     "Access-Control-Expose-Headers"  "X-Metabase-Anti-CSRF-Token"}))
 
 (defn- first-embedding-app-origin