code: @OPTIONS
      @Path("{token: .*}")
      public Response crossOriginForInstallations(
              @Context HttpHeaders headers,
              @PathParam("token") String token) {
  
          return appendPreflightResponseHeaders(headers, Response.ok()).build();
      }
docs: Cross Origin for Installations
  
  @param headers   "Origin" header
  @param token     token
  @return          "Access-Control-Allow-Origin" header for your response
  
  @responseheader Access-Control-Allow-Origin      With host in your "Origin" header
  @responseheader Access-Control-Allow-Methods     POST, DELETE
  @responseheader Access-Control-Allow-Headers     accept, origin, content-type, authorization
  @responseheader Access-Control-Allow-Credentials true
  @responseheader Access-Control-Max-Age           604800
  
  @statuscode 200 Successful response for your request