Do not accept preflight with no Access-Control-Request-Method