added api.peopleandcode.com to whitelist origin in application_initializers.js