add headers and restirct domains methods

api/main.py

@@ -57,7 +57,7 @@ app.add_middleware(
     #allow_origins=["*"],
     allow_origins=["https://show.choozmo.com","https://video.choozmo.com"],
     allow_credentials=True,
-    allow_methods=["*"],
+    allow_methods=["POST","GET"],
     #allow_headers=["*"],
     allow_headers = ["Accept","Origin","Content-Type","X-LS-CORS-Template","X-LS-Auth-Token","X-LS-Auth-User-Token","Content-Type","X-LS-Sync-Result","X-LS-Sequence","token"],
 )