Changes the CORS header to be site specific and vary for development and local