Always allow OPTIONS request permissions.