"Access-Control-Allow-Methods": "GET,HEAD,PUT,POST,OPTIONS", "Access-Control-Allow-Headers": "Authorization, Content-Type"