Again, temporary wildcard

server.js

 // that.
 app.all('/*', function(req, res, next) {
     res.header('Access-Control-Allow-Origin', '*');
+    res.header('Access-Control-Allow-Headers', 'Content-Type')
     next();
 });