title: OPTIONS request authentication
body: <p>I am developing a web application. It is using Basic authentication. It must process OPTIONS requests. These are web browser preflight requests as well as feature-support requests from WebDAV clients. </p>
  
  <p>As far as I understand OPTIONS request must be processed without requesting authentication (that is my server should not respond with 401 Unauthorized), it must give the response such as the following:</p>
  
  <pre><code>OPTIONS https://localhost:44305/path/file.ext HTTP/1.1
  Connection: Keep-Alive
  User-Agent: some app
  Host: localhost:44305
  
  HTTP/1.1 200 OK
  Content-Length: 0
  DAV: 1, 2, 3
  Date: Fri, 27 Dec 2013 17:10:21 GMT
  </code></pre>
  
  <p>My question is: Should I always provide the same response to OPTIONS request, regardless of the URL or should it depend on the URL. </p>
  
  <p>For example if the file.ext in the above example is not found, should I respond with '404 Not found' or with '200 OK'?</p>