* webrtc: allow preflight OPTIONS requests to work with external auth (#1941) * add tests * improve tests