CORS enabled, change to use production endpoint