[Bug] CORS preflight (OPTIONS) requests fail when authentication is enabled

When authRequired is set to true, browser-based clients (such as NodeCG or web dashboards) fail to fetch data because the browser sends a CORS preflight OPTIONS request without credentials. BasicAuthFilter currently rejects this with a 401 Unauthorized, which causes the browser to block the subsequent actual request.

I am submitting a PR to fix this.