where to add header('access-control-allow-origin *') code example Example: access-control-allow-origin Access-Control-Allow-Origin: *