title: The 'Access-Control-Allow-Origin' header contains multiple values
body: <p>i'm trying to send get request to api like it's a login url</p>
  
  <pre><code>var url = "http://demo.software.travel/gptp/api/authorization?apiKey=****&amp;alias=****&amp;login=****&amp;password=****"
  $.get(url, function(data) {
      console.log(data);
  });
  </code></pre>
  
  <p>i'm getting this in my console this error </p>
  
  <blockquote>
    <p>XMLHttpRequest cannot load <a href="http://demo.software.travel/gptp/api/authorization?apiKey=" rel="noreferrer">http://demo.software.travel/gptp/api/authorization?apiKey=</a>****&amp;alias=****&amp;login=****&amp;password=****. The 'Access-Control-Allow-Origin' header contains multiple values '<a href="http://travellights.net" rel="noreferrer">http://travellights.net</a>, *', but only one is allowed. Origin '<a href="http://travellights.net" rel="noreferrer">http://travellights.net</a>' is therefore not allowed access.</p>
  </blockquote>
  
  <p>i'm trying to see questions here to solve it but i didn't get what i need to change, this is annoying actually.</p>
  
  <blockquote>
    <p><a href="https://stackoverflow.com/questions/22343384/the-access-control-allow-origin-header-contains-multiple-values">The &#39;Access-Control-Allow-Origin&#39; header contains multiple values</a></p>
    
    <h2>this solved by asp.net web.congif</h2>
  </blockquote>
  
  <p>By the way i'm using <strong>CHROME BROWSER</strong> any help i appreciate.</p>
  
  <p><strong>UPDATE</strong> response headers:</p>
  
  <pre><code>Access-Control-Allow-Credentials:true
  Access-Control-Allow-Credentials:true
  Access-Control-Allow-Headers:origin, x-requested-with, Content-Type, accept, Token
  Access-Control-Allow-Methods:GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS
  Access-Control-Allow-Origin:http://travellights.net
  Access-Control-Allow-Origin:*
  Connection:close
  Content-Encoding:gzip
  Content-Type:application/json;charset=utf-8
  Date:Thu, 02 Jun 2016 16:41:18 GMT
  Server:nginx/1.1.19
  Set-Cookie:JSESSIONID=51FEE1A1206B9B481DD3EEA4167A9256; Path=/gptp
  Vary:Origin
  Vary:Accept-Encoding
  X-UA-Compatible:IE=EmulateIE7
  </code></pre>
  
  <p>Request Headers:</p>
  
  <pre><code>Accept:application/json, text/javascript, */*; q=0.01
  Accept-Encoding:gzip, deflate, sdch
  Accept-Language:en-US,en;q=0.8,ar;q=0.6,en-GB;q=0.4
  Connection:keep-alive
  Host:demo.software.travel
  Origin:http://travellights.net
  Referer:http://travellights.net/b2b/Pages/login?
  User-Agent:Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
  </code></pre>