Fixed Cors, apparently it does not like a comma separated list...

http://stackoverflow.com/questions/1653308/access-control-allow-origin-multiple-origin-domains