I have an AngularJS WebAPI application.
As far as I can understand the OPTIONS request is constructed automatically by the browser.
POST http://loca
You can also clean your Headers when you login, before sending your POST request:
delete $http.defaults.headers.common['Authorization'];