OPTIONS request do not longer require authentication