Handling preflight(OPTIONS) request

I believe this plugin does not handle CORS well. I have a WP-API client that I want to authenticate using oauth1.0a, now the OPTIONS request also requires authentication.