Vary has no effect on the cors preflight cache: https://stackoverflow.com/questions/42848208/cors-preflight-...