This normal and called a “preflight request”: https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Preflighted_requests Your browser has decided this is a complex request and requires a security check (CORS), which is this OPTIONS request.
Just make your server respond correctly and you are all good.