nginx: add cors header to redirects to openspending.org on port 443

Various sites, like for example data.gov.uk don't work because CORS header is missing in the redirects. Here's the fix.