updated notice about HTTP OPTIONS