Added cors to settings and ensured that local cors exceptions are configured for dev