header('Access-Control-Allow-Origin', '*') ->header('Access-Control-Allow-Methods', 'POST, GET, OPTIONS, PUT, DELETE') ->header('Access-Control-Allow-Credentials', 'true') ->header('Access-Control-Allow-Headers', 'access-control-allow-origin,X-Requested-With,Content-Type,X-XSRF-TOKEN,Authorization') ->header('Accept', 'application/json'); } }