Fix supervisord conf
Allow CORS from any domain