fix: update CORS headers for content negotiation

Bring into line with the Content Negotiation Proxy headers https://gitlab.com/crossref/content_negotiation_proxy/-/blob/master/src/cayenne_data/core.clj#L105

issues#1461 (closed)