add_header Access-Control-Allow-Origin *;

add_header Access-Control-Allow-Headers "Origin,X-Requested-With,Content-Type,Accept,token,requestLanguage,userType,xApiVersion,xAuthPlatform,env";

add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";