HTTP/2 200 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT, PATCH, OPTIONS, HEAD Access-Control-Max-Age: 3600 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: *