Access-Control-Allow-Origin *

Access-Control-Allow-Headers origin, x-requested-with

Access-Control-Allow-Methods POST, GET, OPTIONS

Access-Control-Max-Age 86400