Use CORS in all environments
Bump gems