added leaflet to allowed origins