Is there a scenario in which a client would make an preflight OPTION request, even though the domains are the same so the cross origin policy shouldn't be an issue.