No, the output should have the following, compare mine

and in CURL you should see Access-Control-Allow-Origin: *