resp.setContentType("application/json");
resp.setHeader("Access-control-Allow-Origin", req.getHeader("Origin"));
resp.setHeader("Access-Control-Allow-Methods", "GET,POST,OPTIONS,PUT,DELETE,PATCH");
resp.setHeader("Access-Control-Allow-Headers", req.getHeader("Access-Control-Request-Headers"));