headers->set('Access-Control-Allow-Methods', 'POST, GET, OPTIONS, PUT, DELETE'); return $response; } }