add SENTRY_ALLOW_ORIGIN for JavaScript clients to submit cross-domain error reports