 MIDDLEWARE = [     'corsheaders.middleware.CorsMiddleware',     'django.middleware.security.SecurityMiddleware',     'django.contrib.sessions.middleware.SessionMiddleware',     'django.middleware.common.CommonMiddleware',     'django.middleware.csrf.CsrfViewMiddleware',     'django.contrib.auth.middleware.AuthenticationMiddleware',     'django.contrib.messages.middleware.MessageMiddleware',     'django.middleware.clickjacking.XFrameOptionsMiddleware',  ]  CORS_ORIGIN_ALLOW_ALL = True CORS_ALLOW_CREDENTIALS = True  CORS_ALLOW_METHODS = (     'DELETE',     'GET',     'OPTIONS',     'PATCH',     'POST',     'PUT', )  CORS_ALLOW_HEADERS = (     'accept',     'accept-encoding',     'authorization',     'content-type',     'dnt',     'origin',     'user-agent',     'x-csrftoken',     'x-requested-with', )  