Cors access control allow headers (3/9)

Cors access control allow headers