Remove this header from rules, because it is forbidden. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Request-Method