Add Access-Control-Allow-Headers and Access-Control-Allow-Methods
Change example allow origin to http://localhost:8000