The `isOptions` check is necessary here, as without it, you cannot integrate modules such as ZfrCors to enable CORS support. Regardless, authentication is never necessary when doing OPTIONS requests.