Add django cors headers to allow the app to access the API