var result = new HttpResponseMessage();
result.Headers.Add("Access-Control-Allow-Origin", new[] { "*" });
result.Headers.Add("Access-Control-Allow-Methods", new[] { HttpMethod.Post.Method, HttpMethod.Get.Method });
result.Headers.Add("Access-Control-Allow-Headers", new[] { "*" });