- #Header add Access-Control-Allow-Origin ''
- #Header add Access-Control-Allow-Headers "X-Requested-With, Content-Type"
+# Header set Access-Control-Allow-Origin "*"
+# Header set Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept"
+
+ # jstor expects
+ # X-Requested-With: XMLHttpRequest
+ # https://www.jstor.org/ui_log/info
+ # https://www.jstor.org/access_details/?_=1535108073005
+ # https://www.jstor.org/workspace-service/get-dois?_=1535108073006
+ # https://www.jstor.org/tc/check/10.2307/40323659?_=1535108073007
+ # https://www.jstor.org/tc/accept?origin=%2Ftc%2Fcheck%2F10.2307%2F40323659%3F_%3D1535108073007
+ # https://www.jstor.org/ui_log/counter
+ #