Allowing CORS

Without going into too much depth, try and get your OPTIONS to respond with the following headers to allow full CORS. ?

https://www.google.com/url?rct=j&sa=t&url=http://www.urlhelper.co.uk/allowing-cors/&ct=ga&cd=CAIyGjkxYTc3YmVlM2M5OTBlMDU6Y29tOmVuOlVT&usg=AFQjCNGvmc0LZuLXIkzD2y2Of2ZruOBZBQ