Allow CORS from http://localhost
Merge remote-tracking branches 'upstream/dev' and 'origin/dev'