Disabling CORS on production.