Revisit CORS for vercel previews

PR https://github.com/iotaledger/sagat/pull/15 introduces a way to allow vercel previews access the API, but we should investigate if this is robust enough or we need to be more strict, configure something in vercel for more strict urls, ...