update

app/Http/Middleware/CORS.php

@@ -20,7 +20,7 @@ class CORS
         $headers = [
             'Access-Control-Allow-Origin'=> '*',
             'Access-Control-Allow-Methods'=> 'POST, GET, OPTIONS, PUT, DELETE',
-            'Access-Control-Allow-Headers'=> 'Origin, X-Requested-With, Content-Type, Accept',
+            'Access-Control-Allow-Headers'=> 'Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With, Access-Control-Allow-Methods, Access-Control-Allow-Origin',
             
             'Access-Control-Allow-Credentials'=> 'flase',
         ];