change AllowHeaders and ExposedHeaders to any in content for enable_cors method