disabled auth for now (as wasn't what we needed anywy)
enabled CORS headers (see diff of docs/examples/dotenv for new env var you need to enable).
Note what I'm returning from POST is not what we'll be returning in the end - it just proves we can make the first request to ehrbase and unblocks @adabedi
Also:
Note what I'm returning from POST is not what we'll be returning in the end - it just proves we can make the first request to ehrbase and unblocks @adabedi