Update CORS settings to allow for recaptcha token to be provided in headers

Part of https://gitlab.developers.cam.ac.uk/uis/devops/iam/activate-account/infrastructure/-/issues/3