configurable cors origin, added cors header for allowed headers

[PierreSchwang]

Description

Adds the required header to the preflight request for the deletion route to fix cors issues
Make the allowed origin configurable (but default to *)

Submitter Checklist

Beta Give feedback

1. Make sure you are opening from a topic branch (/feature/fix/docs/ branch (right side)) and not your main branch.
2. Ensure that the pull request title represents the desired changelog entry.
3. New public fields and methods are annotated with @since TODO.
4. I read and followed the contribution guidelines.