resolve cross domain

header('Access-Control-Allow-Origin:*');

        header('Access-Control-Allow-Credentials:true');

        header('Access-Control-Allow-Headers:x-requested-with,content-type');