backup cors. for when all else fails

backupCORS.js

app.use((req, res, next) => {
	debug("running cors");
	res.header(
		"Access-Control-Allow-Headers",
		"Origin, X-Requested-With, COntent-Type, Accept, Authorization"
	);
  // Or drop a tactical nuke with
	// res.header("Access-Control-Allow-Headers", "*");
	if (req.method === "Options") {
		res.header(
			"Access-Control-Allow-Methods",
			"PUT, POST, PATCH, DELETE, GET"
		);
		return res.status(200).json({});
	}
	next();
});