#284: "magic" preflight and CORS plugin