Co-authored-by: Matthijs Knigge <matthijs@volcano.nl>
sse-channel 4 removed CORS support, that's why we need to handle CORS for `/push` ourselves now.