Fix frontend and CORS policy for 'api' subdomain