headers->set('Access-Control-Allow-Origin', '*'); return $response; } }