internal/api/handler/explore.go (2 lines):
	- line 58: w.Header().Set("Access-Control-Allow-Origin", "*") // TODO: remove in production
	- line 78: w.Header().Set("Access-Control-Allow-Origin", "*") // TODO: remove in production