blocked by CORS policy: The \'Access-Control-Allow-Origin\' header contains multiple values \'bar.foo | foo.bar \', but only one is allowed.
How can I s