add CORS headers

geomagio/api/secure/SessionMiddleware.py

@@ -113,7 +113,8 @@ class SessionMiddleware:
         self, message: Message, value: str, max_age: int = None,
     ):
         headers = MutableHeaders(scope=message)
-        headers.append("Cache-Control", "no-cache")
+        headers.append("Cache-Control", "max-age=60")
+        headers.append("Access-Control-Allow-Origin", "*")
         headers.append(
             "Set-Cookie",
             f"{self.session_cookie}={value};"