feat(new.dothiv.org): add CORS header for SSL