let's remove authentication from OPTIONS requests.