header('Access-Control-Allow-Origin', '*') ->header('Access-Control-Allow-Methods', '*') ->header('Access-Control-Allow-Credentials', 'true') ; } }