add CORS headers to alerta api