fix: allow https scheme in CORS allowHost entries

Ktor's allowHost() defaults schemes to ["http"], so requests from
real browsers sending Origin: https://feedback.java.no were being
rejected by the CORS plugin before reaching the route handler,
even though the host itself was allowlisted. Explicitly allow
https for all configured hosts.

Author: tanettrimas

core/src/main/kotlin/no/javazone/feedback/App.kt

@@ -38,9 +38,9 @@ fun Application.module(
         json()
     }
     install(CORS) {
-        allowHost("javazone.no", subDomains = listOf("screens"))
-        allowHost("feedback.java.no")
-        allowHost("f.java.no")
+        allowHost("javazone.no", subDomains = listOf("screens"), schemes = listOf("https"))
+        allowHost("feedback.java.no", schemes = listOf("https"))
+        allowHost("f.java.no", schemes = listOf("https"))
     }
     install(CallLogging)
     install(Authentication) {