https://thewallacehouseblog.blogspot.com/2022/08/javascript-set-header-access-control.html