Updated CORS settings, making it more restrictive