The authentication now ignores OPTIONS requests.