add web config 'Access-Control-Allow-Headers:x-requested-with'