/vaults cors settings

update /vaults to the same cors settings as /screen /bolts, etc.

```
bridge:1 Access to XMLHttpRequest at 'https://bot.opendollar.com/api/vaults' from origin 'https://app.opendollar.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
```