New settings in production.rb for cors