SpotsController CORS Allow-Origin set to http://staging2.united-creative.com
(omitting the port).
Merge remote-tracking branch 'origin/master'