Add production site to cors config