Updated CORS allowed origin pattern.