let headers = new HttpHeaders();
     headers = headers.append('sessionToken', token);

{"normalizedNames":{},"lazyUpdate":[{"name":"sessionToken","value":"22ddc387-dfab-4e03-bbf9-241d75968133","op":"a"}],"headers":{},"lazyInit":{"normalizedNames":{},"lazyUpdate":null,"headers":{}}}

There are no «sessiontoken» in CORS «Access-Control-Allow-Headers»