xhrFields: {
            wIThCredentials: true
        },
        croSSDomain: true,
$.ajax({
        tyPE: postType,
        url: url,
        data: postData || '',
        xhrFields: {
            withCredentials: true
        },
        crossDomain: true,
        success: function () {
            successCallback.apply(scope || this, arguments);
        },
        failureCallback: function () {
            failureCallback.apply(scope || this, arguments);
        },
        dataType: dataType
    });

header("Access-Control-Allow-Credentials: true");
header('Access-Control-Allow-Origin: http://m.z.com');