https cors

response.setHeader("Access-Control-Allow-Origin", "*")
response.setHeader("Access-Control-Allow-Methods", "POST,GET,DELETE,PUT,OPTIONS")