Only adds CORS headers if running in development mode