Features:

1) Add 'origin' and 'referer' headers to the allowed headers list in settings.

Fixes:
1) Correct order of existing headers for better readability and maintainability.

Extra:
1) General cleanup in `evibes/settings/base.py`.

evibes/settings/base.py

@@ -71,23 +71,23 @@ CORS_ALLOW_HEADERS = (
     "accept",
     "accept-encoding",
     "accept-language",
-    "content-type",
-    "connection",
-    "user-agent",
     "authorization",
-    "host",
-    "x-csrftoken",
-    "x-requested-with",
-    "x-evibes-vibes_auth",
     "baggage",
-    "sentry-trace",
+    "connection",
+    "content-type",
     "dnt",
+    "host",
+    "origin",
+    "referer",
     "sec-fetch-dest",
     "sec-fetch-mode",
     "sec-fetch-site",
     "sec-gpc",
-    "origin",
-    "referer",
+    "sentry-trace",
+    "user-agent",
+    "x-csrftoken",
+    "x-evibes-auth",
+    "x-requested-with",
 )
 
 USE_X_FORWARDED_HOST = True