res.header('Access-Control-Allow-Headers', 'Content-Type');
res.header("Access-Control-Allow-Origin", req.get('origin'));
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE');
res.header('Access-Control-Max-Age', 86400);
res.status(200).send('OK');