updated cors whitelist domain origins whitelist domains are defined as an ENV var