Fix project-based CORS settings lookup.

Resolved at logic's did not quite make sense for it's use case, so an additional column 'active_at' now exists which represents the date at which an event became active (open/reopened)

provide a more helpful error message for db backend issues

Fix typo "ag_list" -> "tag_list" in docstring