Prevent an early 401 for OPTIONS requests. Was unable to send Authorization header with OPTIONS, which was halting in 401 before being able to authenticate CRUD requests.