[SR-Users] avoid OPTION requests without authentication