diff --git a/rewrite/nginx/header_cors.conf b/rewrite/nginx/header_cors.conf
index afc176f70..61a875c36 100755
--- a/rewrite/nginx/header_cors.conf
+++ b/rewrite/nginx/header_cors.conf
@@ -1,9 +1,15 @@
 
-add_header Access-Control-Allow-Origin *;
-add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
+add_header 'Access-Control-Allow-Methods' 'GET,OPTIONS,POST' always;
+add_header 'Access-Control-Allow-Credentials' 'true' always;
+add_header 'Access-Control-Allow-Origin' $http_origin always;
+add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type, X-Requested-With, Cache-Control' always;
 
 
 
 #add_header Access-Control-Allow-Origin *;
+#add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
+
+
+#add_header Access-Control-Allow-Origin *;
 #add_header Access-Control-Allow-Methods *;
 #add_header Access-Control-Allow-Header *;