Ограниченный контроль доступа-разрешения-происхождения

Я продолжаю получать

'No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://hackersocial.labs.com' is therefore not allowed access. '

с Restangular, хотя я уверен, что правильно настроил больше CORS. У меня есть следующее:

Angular / Restangualr Site

$event.preventDefault();
Restangular.one('offers', '').get({'offer_id' : 1 });

PHP сторона

$origin = $_SERVER['HTTP_ORIGIN'];
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {

if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']) && ($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'] == 'POST' || $_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'] == 'DELETE' ||  $_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'] == 'PUT' )) {
header('Access-Control-Allow-Origin: ' . $origin);
header("Access-Control-Allow-Credentials: true");
header('Access-Control-Allow-Headers:  *,X-Requested-With,Content-Type');
header('Access-Control-Allow-Headers: Content-Type');
header('Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT'); // http://stackoverflow.com/a/7605119/578667
header('Access-Control-Max-Age: 86400');
}
echo PVResponse::createResponse(200, 'Successful Connection');
exit();
}

//Execute if Options is present
header('Access-Control-Allow-Origin: '. $origin );
header('Access-Control-Allow-Credentials: true' );
header('Access-Control-Request-Method: *');
header('Access-Control-Allow-Methods: POST, GET, PUT, DELETE, OPTIONS');
header('Access-Control-Allow-Headers: *,x-requested-with,Content-Type');
header('X-Frame-Options: DENY');

Так что я уверен, что мои настройки CORS верны, почему я получаю эту ошибку с Restangular?