Fix CORS origins check

[Sebastian Bischoff]

Fix check of origin of request to API. In the moment it's a * which isn't super secure:

32de-python/api/server.py

Line 32 in ea2fc0e

 CORS(app, supports_credentials=True, resources={r"/*": {"origins": "*"}}) 

Corresponding code was written but doesn't work.