OPTIONS request do not need an api key.