/*
  Access-Control-Allow-Origin: *
  Access-Control-Allow-Methods: GET, OPTIONS
  Access-Control-Allow-Headers: Content-Type, Authorization

/rss.xml
  Content-Type: application/rss+xml; charset=utf-8
  X-Content-Type-Options: nosniff
