Access Control Allow Origin Returning Different Header Than Origin

Question

I have my backend running at api.example.com. Backend is built in Rails with different origins allowed from where calls are coming. I have a website at example2.com which ma