Header add Access-Control-Allow-Methods: "GET"