changed cors resource to production