diff --git a/baasDOSLcl/src/main/java/com/bankaudit/jwthelper/JwtTokenFilter.java b/baasDOSLcl/src/main/java/com/bankaudit/jwthelper/JwtTokenFilter.java
index 9995f07..b4212e2 100644
--- a/baasDOSLcl/src/main/java/com/bankaudit/jwthelper/JwtTokenFilter.java
+++ b/baasDOSLcl/src/main/java/com/bankaudit/jwthelper/JwtTokenFilter.java
@@ -50,11 +50,9 @@ public class JwtTokenFilter extends OncePerRequestFilter {
         response.setHeader("Access-Control-Allow-Origin", "*");
         response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE, PUT");
         response.setHeader("Access-Control-Max-Age", "3600");
-        response.setHeader("Access-Control-Allow-Headers",
-                "Authorization, Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers");
-
         if ("OPTIONS".equals(request.getMethod())) {
             response.setStatus(HttpServletResponse.SC_OK);
+            return;
         } else {
             if  (isExcludedEndpoint(requestPath)) {
                 filterChain.doFilter(request, response);