def options(self):
    self.response.headers['Access-Control-Allow-Origin'] = '*'
self.response.headers['Access-Control-Allow-Headers'
    ] = """Origin, X-Requested-With, Content-Type, Accept"""
self.response.headers['Access-Control-Allow-Methods'
    ] = 'POST, GET, PUT, DELETE'
CORS — использование AJAX для публикации в веб-службе Python (webapp2)