omit preflight special case so as to allow other OPTIONS requests through