set CORS on .well-known URI to unbreak modular
set CORS on .well-known URI to unbreak modular

otherwise a riot/web running on foo.riot.im can't query
the .well-known on foo.modular.im...

matrix-org/synapse,matrix-org/synapse,matrix-org/synapse,matrix-org/synapse,matrix-org/synapse,matrix-org/synapse