Header set Access-Control-Allow-Origin "*" Header set Access-Control-Allow-Methods "POST, GET, OPTIONS, PUT, DELETE" Header set Access-Control-Allow-Headers "Content-Type, X-Requested-With, Authorization"