Updated CORS whitelist to support HTTPS/SSL-enabled site.