add headers and restirct domains

api/main.py

@@ -59,7 +59,7 @@ app.add_middleware(
     allow_credentials=True,
     allow_methods=["*"],
     #allow_headers=["*"],
-    allow_headers['Accept','Origin','Content-Type','X-LS-CORS-Template','X-LS-Auth-Token','X-LS-Auth-User-Token','Content-Type','X-LS-Sync-Result','X-LS-Sequence','token'],
+    allow_headers = ["Accept","Origin","Content-Type","X-LS-CORS-Template","X-LS-Auth-Token","X-LS-Auth-User-Token","Content-Type","X-LS-Sync-Result","X-LS-Sequence","token"],
 )