A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header
GET https://graph.facebook.com/v2.8/oauth/access_token?client_id=37205331650849…uE88_1jFF0Sj4eNMINFswpXaUNTWVYK380qwn8P4Jyjty7JUCNmFs9NpCnN5P06HE2S9vJwCEy 400 () Request.end @ request.js:117 Request.end @ request.js:1438 end @ request.js:566 (anonymous) @ request.js:580 onNextTick @ main.js:64 Item.run @ browser.js:153 drainQueue @ browser.js:123 ?code=1:1 XMLHttpRequest cannot load https://graph.facebook.com/v2.8/oauth/access_token?client_id=37205331650849…uE88_1jFF0Sj4eNMINFswpXaUNTWVYK380qwn8P4Jyjty7JUCNmFs9NpCnN5P06HE2S9vJwCEy. A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header when the credentials flag is true. Origin 'http://localhost:7000' is therefore not allowed access. The credentials mode of an XMLHttpRequest is controlled by the withCredentials attribute.