Update haproxy config

Add CORS allow-header response headers for API backends