Use cors to shorten URLs (and fix CORS hack)

Since we use different callback names in CHSDI and CHSDI3, it is better to use CORS like everywhere else.

This PR can be merged indenpendently of
https://github.com/geoadmin/mf-chsdi3/pull/563