avoid cached CORS preflight

admin: avoid cached CORS preflight