[MyCorsPolicy]
public class TestController : ApiController
{
    .. //