add Gijs his Vagrant box to the CORS whitelist