AtmosphereRequest req = r.getRequest();
AtmosphereResponse res = r.getResponse();
if (req.getHeader("Origin") != null && res.getHeader("Access-Control-Allow-Origin") == null) {
res.addHeader("Access-Control-Allow-Origin", req.getHeader("Origin"));
res.addHeader("Access-Control-Expose-Headers", EXPOSE_HEADERS);
res.setHeader("Access-Control-Allow-Credentials", "true");
}
if ("OPTIONS".equals(req.getMethod())) {
res.setHeader("Access-Control-Allow-Methods", "OPTIONS, GET, POST");