/api/*
  Cache-Control: no-store, no-cache, must-revalidate
  Pragma: no-cache
  Expires: 0

/*
  Access-Control-Allow-Origin: *