fix http OPTIONS for delegated requests