headers.add("Access-Control-Allow-Origin", "*");
headers.add("Access-Control-Allow-Methods",
"GET, POST, PUT, DELETE, OPTIONS, HEAD");
headers.add(
"Access-Control-Allow-Headers",
"Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization");
headers.add("Access-Control-Expose-Headers", "WWW-Authenticate");