allowCrossDomain(['Access-Control-Allow-Credentials' => 'true'])->middleware(\app\api\middleware\FrequentAccessCheck::class);