Missing Access-Origin-Allow-Host header

[jakubno]

Check if headers aren't removed by nginx proxies used for sandbox networking.

I was getting the header inside the sandbox, but it wasn't present when requesting from outside.