update

app/Http/Middleware/CORS.php

@@ -20,7 +20,8 @@ class CORS
         $headers = [
             'Access-Control-Allow-Origin'=> '*',
             'Access-Control-Allow-Methods'=> 'POST, GET, OPTIONS, PUT, DELETE',
-            'Access-Control-Allow-Headers'=> 'Content-Type, X-Auth-Token, Origin',
+            'Access-Control-Allow-Headers'=> 'Content-Type',
+            
             'Access-Control-Allow-Credentials'=> 'false',
         ];