Again, temporary wildcard

server.js

@@ -35,6 +35,7 @@ app.use(bodyParser.json());
 // that.
 app.all('/*', function(req, res, next) {
     res.header('Access-Control-Allow-Origin', '*');
+    res.header('Access-Control-Allow-Headers', 'Content-Type')
     next();
 });