Disable authentication for HTTP OPTIONS method (preflight request)
Solution 1:
You can limit the scope of Require valid-user by using Limit/LimitExcept :
<LimitExcept OPTIONS>
Require valid-user
</LimitExcept>
See apache documentation on Limit