response

var CORS_HEADERS = map[string]string{
	"Access-Control-Allow-Headers":     "Content-Type,X-Amz-Date,X-Amz-Security-Token,Authorization,X-Api-Key,X-Requested-With,Accept,Access-Control-Allow-Methods,Access-Control-Allow-Origin,Access-Control-Allow-Headers",
	"Access-Control-Allow-Origin":      "*",
	"Access-Control-Allow-Methods":     "DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT",
	"Access-Control-Allow-Credentials": "true",
	"X-Requested-With":                 "*",
}