Define origins in access-control-allow-origin header for in-app notifications - Novu