Prevent CORS issues in dev

Set origins to * in the dev environment