So why exactly don't we want OPTIONS? Is it because no XHR could actually be constructed to issue that request to a server?