<httpProtocol> <customHeaders> <add name="Access-Control-Allow-Methods" value="OPTIONS,POST,GET"></add> <add name="Access-Control-Allow-Headers" value="x-requested-with,Content-Type"></add> <add name="Access-Control-Allow-Origin" value="*" ></add> </customHeaders> </httpProtocol>