Analysis of CORS OPTIONS request: what does this request do, how to interpret the response body, what does the star in the header mean?