Add Timing-Allow-Origin to API response headers

[rviscomi]

Add the Timing-Allow-Origin: * header to the API responses to allow client-side monitoring to capture info about the API performance. This will let us see how often users are experiencing slow and heavy responses.

[maceto]

@rviscomi the header was added to dev and prd. Please let me know if works as expected.

[rviscomi]

Thanks @maceto looks like it's working