revert(api): decouple api from curriculum

This reverts commit c077ffe4b9
via PR #40703

api-server/server/middlewares/constant-headers.js

@@ -0,0 +1,22 @@
+import { homeLocation } from '../../../config/env';
+import { allowedOrigins } from '../../../config/cors-settings';
+
+export default function constantHeaders() {
+  return function(req, res, next) {
+    if (
+      req.headers &&
+      req.headers.origin &&
+      allowedOrigins.includes(req.headers.origin)
+    ) {
+      res.header('Access-Control-Allow-Origin', req.headers.origin);
+    } else {
+      res.header('Access-Control-Allow-Origin', homeLocation);
+    }
+    res.header('Access-Control-Allow-Credentials', true);
+    res.header(
+      'Access-Control-Allow-Headers',
+      'Origin, X-Requested-With, Content-Type, Accept'
+    );
+    next();
+  };
+}