CORS
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
https://www.serverless.com/blog/cors-api-gateway-survival-guide