I've created an asp.net web api 2 service with individual account security. I'm trying to call it form AngularJs as per this example:
<http://www.codeproject.com/Articles/742532/Using-Web-API-Individual-User-Account-plus-CORS-En>
could not get that to work so added some config from here:
[How to make CORS Authentication in WebAPI 2?](https://stackoverflow.com/questions/20079813/how-to-make-cors-authentication-in-webapi-2)

and can't get past this error:
XMLHttpRequest cannot load 'serverRegisterUrl'. 
The 'Access-Control-Allow-Origin' header contains multiple values 'clientUrl, \*, \*', 
but only one is allowed. Origin 'clientUrl' is therefore not allowed access. 

I don't understand this error message. I think that Access-Control-Allow-Origin string means allow origin clientUrl, all headers, all methods

I don't understand the problem. If I'm supposed to just specify the origin alone somewhere, I don't know where that is.

I'm running this on Microsoft Azure and using vs express for web 2013 update 2 just in case it matters.

I unfortunately had to take my links out of the error message because I need atleast reputation 10 here to post more then 2 links in a question.