simplify language; add redundant info; add example
fixes preflight request executing the protected route