Update to open-contracting domain to prevent CORS