Add support for CORS error

When we call the API from browser, we get CORS error as below:

Access to fetch at 'https://naas.isalman.dev/no' from origin 'https://sampledomain.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled

We should make changes at API layer to allow Cross Origin requests.

I can raise a PR for this, Let me know your thoughts...