diff --git a/default.conf b/default.conf
index 0c2fa1d..5b07293 100644
--- a/default.conf
+++ b/default.conf
@@ -18,7 +18,7 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
       return 200;
     }
     if ($host = sadmin.pena) {
@@ -35,13 +35,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.11:59300;
   }
@@ -53,7 +53,7 @@ server {
   location /heruvym/ {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization,sess always;
+    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
     add_header Referrer-Policy unsafe-url always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_set_header Referer $host;
@@ -70,7 +70,7 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
@@ -85,13 +85,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.11:8065/;
   }
@@ -100,13 +100,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.11:59664/;
   }
@@ -115,13 +115,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.11:8085/;
   }
@@ -138,7 +138,7 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype always;
+    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
     add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
@@ -146,7 +146,7 @@ server {
     
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype always;
+    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
     add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.23:1490/;
@@ -164,13 +164,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype always;
+    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype always;
+    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.23:1488/;
   }
@@ -179,13 +179,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_set_header Referer $host;
     proxy_set_header Origin $http_origin;
@@ -201,13 +201,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_pass http://10.6.0.11:8001/;
   }
@@ -215,12 +215,12 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,response-type always;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,response-type always;
     proxy_set_header Host $host;
     proxy_pass http://10.8.0.6:8006/;
   }
@@ -228,14 +228,14 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,response-type always;
     add_header Access-Control-Allow-Methods GET;
 
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,response-type always;
     add_header Access-Control-Allow-Methods GET;
     chunked_transfer_encoding off;
     proxy_buffering off;
@@ -246,14 +246,14 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,response-type always;
     add_header Access-Control-Allow-Methods GET;
 
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,response-type always;
     add_header Access-Control-Allow-Methods GET;
     chunked_transfer_encoding off;
     proxy_buffering off;
@@ -264,13 +264,13 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
     proxy_set_header Referer $host;
     proxy_set_header Origin $http_origin;