modifying allowed origins to include any subdomain of "yoursecondphone.co"