@Leo Why not make OPTIONS a seperate rate limiting rule? That way browsers will get the same amount of allowed requests, while you still maintain control of rate limiting OPTIONS 😛