Respond correctly to preflight browser CORS checks (#1784)
Respond correctly to preflight browser CORS checks (#1784)

When sending cross-origin requests to the Flexget API server initiated
via JavaScript, clients (web browsers) follow the W3C Recommendation
CORS section 7.1.5 and do preflight checks “to ensure that the resource
is aware of this specification”. User credentials must be excluded from
the request. These requests are sent via the OPTIONS method. Currently,
Flexget responds with status code 401 (unauthorized), causing the
preflight request to fail in the browser, and therefore subsequent
request with authentication information is never sent. This resolves
that by allowing all OPTIONS requests without authentication,
regardless of endpoint.
Flexget/Flexget,tobinjt/Flexget,qk4l/Flexget,LynxyssCZ/Flexget,crawln45/Flexget,Danfocus/Flexget,crawln45/Flexget,Danfocus/Flexget,JorisDeRieck/Flexget,ianstalk/Flexget,ianstalk/Flexget,crawln45/Flexget,Danfocus/Flexget,JorisDeRieck/Flexget,Flexget/Flexget,OmgOhnoes/Flexget,malkavi/Flexget,qk4l/Flexget,tobinjt/Flexget,tobinjt/Flexget,tobinjt/Flexget,LynxyssCZ/Flexget,LynxyssCZ/Flexget,Flexget/Flexget,gazpachoking/Flexget,malkavi/Flexget,Flexget/Flexget,poulpito/Flexget,malkavi/Flexget,qk4l/Flexget,JorisDeRieck/Flexget,malkavi/Flexget,OmgOhnoes/Flexget,Danfocus/Flexget,jawilson/Flexget,gazpachoking/Flexget,jawilson/Flexget,poulpito/Flexget,ianstalk/Flexget,LynxyssCZ/Flexget,JorisDeRieck/Flexget,poulpito/Flexget,jawilson/Flexget,OmgOhnoes/Flexget,crawln45/Flexget,jawilson/Flexget