resolve the preflight request(OPTIONS) with no cookies issue.  Preflight
request should not contain any user credential.  So the entry point
should not return any error when it's a preflight request.