Return empty body in OPTIONS requests

app/controllers/api/cors_controller.rb

@@ -5,7 +5,7 @@ module Api
 
     def cors_preflight_check
       set_access_control_headers
-      render json: { status: :ok }
+      render text: ''
     end
 
     def set_access_control_headers

test/integration/api/registrant/registrant_api_cors_headers_test.rb

@@ -18,4 +18,10 @@ class RegistrantApiCorsHeadersTest < ApplicationIntegrationTest
                response.headers['Access-Control-Allow-Headers'])
     assert_equal('3600', response.headers['Access-Control-Max-Age'])
   end
+
+  def test_returns_empty_body
+    options '/api/v1/registrant/auth/eid', {}
+
+    assert_equal('', response.body)
+  end
 end