Remove optional header to reduce CORS preflights