looks like they’re sending a header `Access-Contro...

# ktor

[joshua.ewer]

looks like they’re sending a header Access-Control-Request-Headers: authorization to the preflight, even though they don’t actually send that header to the actual request