http://www.ruanyifeng.com/blog/2016/04/same-origin-policy.htmlhttp://www.ruanyifeng.com/blog/2016/04/cors.htmlhttps://developer.mozilla.org/en-US/docs/Web/HTTP/Server-Side_Access_Control