Revert "add cors header" - moving this to nginx config

This reverts commit 7e49d69223522d550556fc4cfd4209ead64ae6df.