remove cross domain access from the ruby server

this is no longer needed since we are behind a single facing TLD via nginx