Should an OPTIONS request ever return a 429?
The problem is really that a Browser client (js) can not detect the 429 correctly when returned from an OPTIONS request. So I'm leaning towards only returning 429 for non OPTIONS requests.
What is best practise here?