In many cases, http://www.w3.org/TR/cors/#resource-preflight-requests calls for the service to note the presence of an invalid header differently from no header at all.
Have we got any way to keep track of this? or do we already reject requests with 'imparsible' headers?
