diff --git a/src/server/middleware.coffee b/src/server/middleware.coffee
index e5ada1e5e1..0a16aad85a 100644
--- a/src/server/middleware.coffee
+++ b/src/server/middleware.coffee
@@ -17,5 +17,5 @@ module.exports.view = (req, res, next) ->
 module.exports.allowCrossDomain = (req, res, next) ->
   res.header "Access-Control-Allow-Origin", '*'
   res.header "Access-Control-Allow-Methods", "GET,PUT,POST,DELETE"
-  res.header "Access-Control-Allow-Headers", "Content-Type,x-requested-with"
+  res.header "Access-Control-Allow-Headers", "Content-Type,x-requested-with,x-api-user,x-api-key"
   next()
\ No newline at end of file