title: django-cors-headers not working at all
body: <p>Well, initially I had forgotten the <strong>middleware class</strong> but after adding it just worked fine ( It was a week ago ).</p>
  
  <p>Now, I am back to my workstation and I find it again not working.</p>
  
  <p>The <code>ACCESS_CONTROL_ALLOW_ORIGIN</code> headers are not at all being set.</p>
  
  <p>I have tried all that is, placing the middleware at top, before <code>CommonMiddleware</code> but it just doesn't work.</p>
  
  <p>This is my <strong>setting.py</strong> file : </p>
  
  <pre><code>DEBUG = True
  
  ALLOWED_HOSTS = ['*']
  
  # Application definition
  INSTALLED_APPS = [
      'account',
      'corsheaders',
      'django.contrib.admin',
      'django.contrib.auth',
      'django.contrib.contenttypes',
      'django.contrib.sessions',
      'django.contrib.messages',
      'django.contrib.staticfiles',
      'social_django',
  ]
  
  # if DEBUG:
  #     INSTALLED_APPS += 'corsheaders',
  #     MIDDLEWARE = ['corsheaders.middleware.CorsMiddleware', ]
  # else:
  #     MIDDLEWARE = []
  
  MIDDLEWARE = [
      'django.middleware.security.SecurityMiddleware',
      'django.contrib.sessions.middleware.SessionMiddleware',
      'corsheaders.middleware.CorsMiddleware',
      'django.middleware.common.CommonMiddleware',
      'django.middleware.csrf.CsrfViewMiddleware',
      'django.contrib.auth.middleware.AuthenticationMiddleware',
      'django.contrib.messages.middleware.MessageMiddleware',
      'django.middleware.clickjacking.XFrameOptionsMiddleware',
  ]
  
  CORS_ORIGIN_ALLOW_ALL = DEBUG
  </code></pre>
  
  <p>This is the response I am getting : </p>
  
  <pre><code>Date: Sun, 14 Jan 2018 09:35:09 GMT
  Server: WSGIServer/0.1 Python/2.7.14+
  X-Frame-Options: SAMEORIGIN
  Content-Type: text/html; charset=utf-8
  Content-Length: 146
  </code></pre>