Added CORS setting to easier turn it on for production.