correct staging env cors origins for local client testing
Add delete to whitelisted cors http methods