check dsn.xml access protocol without "X-Requested-With" -- invokes HTTP OPTIONS protocol?