update config.ru to allow cross origin on heroku