deploy CORS fixes to prod