The 'Access-Control-Allow-Origin' header contains multiple values
<p>i'm trying to send get request to api like it's a login url</p>

<pre><code>var url = "http://demo.software.travel/gptp/api/authorization?apiKey=****&amp;alias=****&amp;login=****&amp;password=****"
$.get(url, function(data) {
    console.log(data);
});
</code></pre>

<p>i'm getting this in my console this error </p>

<blockquote>
  <p>XMLHttpRequest cannot load <a href="http://demo.software.travel/gptp/api/authorization?apiKey=" rel="noreferrer">http://demo.software.travel/gptp/api/authorization?apiKey=</a>****&amp;alias=****&amp;login=****&amp;password=****. The 'Access-Control-Allow-Origin' header contains multiple values '<a href="http://travellights.net" rel="noreferrer">http://travellights.net</a>, *', but only one is allowed. Origin '<a href="http://travellights.net" rel="noreferrer">http://travellights.net</a>' is therefore not allowed access.</p>
</blockquote>

<p>i'm trying to see questions here to solve it but i didn't get what i need to change, this is annoying actually.</p>

<blockquote>
  <p><a href="https://stackoverflow.com/questions/22343384/the-access-control-allow-origin-header-contains-multiple-values">The &#39;Access-Control-Allow-Origin&#39; header contains multiple values</a></p>
  
  <h2>this solved by asp.net web.congif</h2>
</blockquote>

<p>By the way i'm using <strong>CHROME BROWSER</strong> any help i appreciate.</p>

<p><strong>UPDATE</strong> response headers:</p>

<pre><code>Access-Control-Allow-Credentials:true
Access-Control-Allow-Credentials:true
Access-Control-Allow-Headers:origin, x-requested-with, Content-Type, accept, Token
Access-Control-Allow-Methods:GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS
Access-Control-Allow-Origin:http://travellights.net
Access-Control-Allow-Origin:*
Connection:close
Content-Encoding:gzip
Content-Type:application/json;charset=utf-8
Date:Thu, 02 Jun 2016 16:41:18 GMT
Server:nginx/1.1.19
Set-Cookie:JSESSIONID=51FEE1A1206B9B481DD3EEA4167A9256; Path=/gptp
Vary:Origin
Vary:Accept-Encoding
X-UA-Compatible:IE=EmulateIE7
</code></pre>

<p>Request Headers:</p>

<pre><code>Accept:application/json, text/javascript, */*; q=0.01
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8,ar;q=0.6,en-GB;q=0.4
Connection:keep-alive
Host:demo.software.travel
Origin:http://travellights.net
Referer:http://travellights.net/b2b/Pages/login?
User-Agent:Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
</code></pre>