Access Control headers are being duplicated. Should only be one instance of each value. This should be visible on any current API call.

Current values: AUTHORIZATION, CONTENT-TYPE, X-REQUESTED-WITH, COOKIE, X-CSRF-TOKEN, COOKIE, X-CSRF-TOKEN, COOKIE, X-CSRF-TOKEN, COOKIE, X-CSRF-TOKEN, COOKIE, X-CSRF-TOKEN, COOKIE, X-CSRF-TOKEN, COOKIE, X-CSRF-TOKEN