[tei-council] Allow CORS requests on the vault