Which of these headers allow you to do CORS?
Access-Control-Allow-Origin:
Access-Control-Allow-Headers:
CORS-Allow:
Access-Allow-CORS: