Modify .htaccess to allow CORS requests (for public API)

Signed-off-by: JWhy <jwhy@jwhy.de>