<customHeaders>

        <add name="Access-Control-Max-Age" value=""/>

        <add name="Access-Control-Allow-Origin" value="*" />

        <add name="Access-Control-Allow-Headers" value="Origin, X-Requested-With, Content-Type,Authorization" />

        <add name="Access-Control-Allow-Methods" value="PUT,GET,POST,DELETE,OPTIONS"/>

      </customHeaders>