Made sure the CORS filter doesn't eagerly consider an OPTIONS query a CORS preflight request