Allowing CORS for now until production mode is up