NPA-3877 Update Sandbox CORS response

Author: JackPlowman

proxies/sandbox/apiproxy/policies/RaiseFault.DefaultError.xml

@@ -9,11 +9,16 @@
 -->
 <RaiseFault async="false" continueOnError="false" enabled="true" name="RaiseFault.DefaultError">
     <DisplayName>RaiseFault.DefaultError</DisplayName>
+
     <Properties/>
     <FaultResponse>
         <Set>
             <Headers>
               <Header name="Content-Type">application/fhir+json</Header>
+              <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
+              <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id</Header>
+              <Header name="Access-Control-Max-Age">3628800</Header>
+              <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE</Header>
             </Headers>
         </Set>
     </FaultResponse>