if preflight, respond with preflight headers