BUG: Add CORS to the api

[irony]

Add CORS headers to the API so the app can send POST requests.
https://cl.ly/0K43231t1f47

[superyass]

those routes are not on the server side yet,
this should be merged and deployed first: refugeetech/platform#222
thanks.