Fix issue with last commit.

server.py

@@ -83,11 +83,6 @@ async def cors_middleware(request: web.Request, handler):
 def create_origin_only_middleware():
     @web.middleware
     async def origin_only_middleware(request: web.Request, handler):
-        if request.method == "OPTIONS":
-            response = web.Response()
-        else:
-            response = await handler(request)
-
         if 'Host' in request.headers and 'Origin' in request.headers:
             host = request.headers['Host']
             origin = request.headers['Origin']
@@ -97,6 +92,11 @@ async def origin_only_middleware(request: web.Request, handler):
                 logging.warning("WARNING: request with non matching host and origin {} != {}, returning 403".format(host_domain, origin_domain))
                 return web.Response(status=403)
 
+        if request.method == "OPTIONS":
+            response = web.Response()
+        else:
+            response = await handler(request)
+
         return response
 
     return origin_only_middleware