Comment by jlemoine

The issue was the same with HTTPS. HTTPS does not prevent the problem since the firewall was blocking all OPTIONS request.