code: def set_cors_common_headers(self):
          
          if not self.cors: return
  
          req = self.request
          origin = req.get_header('origin')
          if origin:
              self.response.set_header('Access-Control-Allow-Origin', origin)
docs: This will set the headers that are needed for any cors request (OPTIONS or real)