You could skip basicauth for OPTIONS like this:
basicauth
OPTIONS
@not-options not method OPTIONS basicauth @not-options { ... }