more permisive CORS

related to #22
2 jobs for 22-security-issues in 3 minutes and 32 seconds