We really need Authorization added to simple headers. Needing to preflight every single SPA request either causes a huge performance hit or else forces super ha

We really need Authorization added to simple headers. Needing to preflight every single SPA request either causes a huge performance hit or else forces super hacky workarounds that introduce their own security issues. Not good for the web.