Let CORS preflight fetch perform its own CORS check. Also if a CORS cache has credentials set to true, a preflight with or without credentials will now match it. https://www.w3.org/Bugs/Public/show_bug.cgi?id=26694