docs: function getCorsHeader(request) {
      var origin = request.get('origin');
      var accessControlRequestHeaders = request.get('Access-Control-Request-Headers');
  
      var header = {
          'Access-Control-Allow-Methods': 'GET,HEAD,PUT,PATCH,POST,DELETE',
          'Access-Control-Allow-Credentials': 'true'
      };
      header['Access-Control-Allow-Origin'] = origin ? origin : '*';
  
      if (accessControlRequestHeaders) {
          header['Access-Control-Allow-Headers'] = accessControlRequestHeaders;
      }
  
      return header;
  }