Allow only Bangazonians access to the API

[Arwask]

Update, and use, a CORS policy that only allows requests from the http://bangazon.com domain.

Ref: https://docs.microsoft.com/en-us/aspnet/core/security/cors