in internal/httphandler/httphandler.go [100:104]
func addHeaders(w http.ResponseWriter) { addHTSTHeader(w) w.Header().Add("Cache-Control", "no-store") w.Header().Add("Access-Control-Allow-Origin", "*") }