code: func removeCORSHeaders(resp *http.Response) {
  	resp.Header.Del("Access-Control-Allow-Credentials")
  	resp.Header.Del("Access-Control-Allow-Headers")
  	resp.Header.Del("Access-Control-Allow-Methods")
  	resp.Header.Del("Access-Control-Allow-Origin")
  }
docs: // removeCORSHeaders strip CORS headers sent from the backend
  // This should be called on all responses before returning