Unless I'm mistaken, an OPTIONS request is used to determine who can make a request to that same route, what headers they can use, what methods they can use, etc.  So, when a client makes an OPTIONS request to `/api/1.0/notify`, the response should basically say "any host can request this resource; they may supply only the `Content-Type` header, and they may only use the POST method."