CORS headers (Express)

CORS.coffee

app.get "*", (request, response, next) ->
  response.header "Access-Control-Allow-Origin", "*"
  response.header "Access-Control-Allow-Methods", "GET, SETTINGS"
  response.header "Access-Control-Allow-Credentials", "true"
  response.header "Access-Control-Max-Age", "0"
  response.header "Cache-Control", "no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0"
  return next()