diff --git a/src/main/kotlin/com/ray650128/pcredive/plugins/HTTP.kt b/src/main/kotlin/com/ray650128/pcredive/plugins/HTTP.kt
index aee5e75..02b27ff 100644
--- a/src/main/kotlin/com/ray650128/pcredive/plugins/HTTP.kt
+++ b/src/main/kotlin/com/ray650128/pcredive/plugins/HTTP.kt
@@ -11,7 +11,9 @@ fun Application.configureHTTP() {
         allowMethod(HttpMethod.Delete)
         allowMethod(HttpMethod.Patch)
         allowHeader(HttpHeaders.Authorization)
-        allowHeader("MyCustomHeader")
-        anyHost() // @TODO: Don't do this in production if possible. Try to limit it.
+        allowHeader(HttpHeaders.AccessControlAllowOrigin)
+        anyHost()
+        allowCredentials = true
+        allowNonSimpleContentTypes = true
     }
 }