removed www prefix from CORs url.