CORS-HIDER ACCESS-CONTROL-ALLOW-ORIGIN manquant dans une API CakePHP particulière

header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, GET, PUT, PATCH, DELETE, OPTIONS');
header('Access-Control-Allow-Headers: *');
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
    exit(0);
}
Faithful Ferret