header('Access-Control-Allow-Origin:*');header('Access-Control-Allow-Methods:POST,GET,OPTIONS');header('Access-Control-Allow-Headers:x-requested-with,content-type,requesttype,token');