The Access Control CORS issue was fixed adding the content-type on res.header