"Access-Control-Allow-Origin"= "*" "Access-Control-Allow-Headers"= "X-Requested-With" 'Access-Control-Allow-Headers'='Content-Type'