access-control-allow-origin for /api/db/:version