Access-Control headers
Also written: Access-Control-Allow-Origin, OPTIONS request
Extra response headers the practice server sends so a browser (the Chrome version of the app) is allowed to call it. Chrome also sends an `OPTIONS` request before a `POST` to check them.