Conditional CORS headers for dev vs prod
Fix for logout link
Enabled sending auth header during CORS requests