No Access-Control-Allow-Origin sent from GraphQL API on sourcegraph.com

Created by: felixfbecker

This breaks the Gitlab native integration, because it cannot fetch the user configuration from sourcegraph.com. Is there any reason why we wouldn't allow any origin to make a GraphQL request? Not sure if this is a code issue or a config issue on sourcegraph.com.