Remove cors origin * on release

[Sebastian-Webster]

On release, we will not want to accept requests from origin *. The origin is only set to * right now to make it easier during development.