Enable CORS for the API
cf https://developer.mozilla.org/fr/docs/HTTP/Access_control_CORS
Fix Content-Type in the API