Why are xhr_headers not being applied to the OPTIONS request, but only being applied to the POST request in a cross site origin request to mixpanel?