Allowing CORS with ExpressJS and AngularJS

angular.js

// Add COR ability
$httpProvider.defaults.useXDomain = true;
delete $httpProvider.defaults.headers.common['X-Requested-With'];
$httpProvider.defaults.withCredentials = true;

express.js

app.all('/*', function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "{GRUNT_SERVER}");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  res.header("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE");
  res.header("Access-Control-Allow-Credentials", "true");
  next();
});

// Session config.
app.use(express.session({
  secret : config.get(cookieSecret),
  key : 'sid',
  cookie : {
    maxAge : null,
    httpOnly : false
  }
}));