diff --git a/src/utils.rs b/src/utils.rs
index 06fa592..1b9b7f4 100644
--- a/src/utils.rs
+++ b/src/utils.rs
@@ -12,6 +12,7 @@ async fn options(app_state: Data<AppState>) -> impl Responder {
             app_state.allow_origins.join(","),
         ))
         .append_header(("Access-Control-Allow-Methods", "GET, OPTIONS"))
-        .append_header(("Access-Control-Allow-Headers", "Content-Type"))
+        .append_header(("Access-Control-Allow-Headers", "Content-Type, Authorization"))
+        .append_header(("Access-Control-Allow-Credentials", "true"))
         .finish()
 }