diff --git a/api/conf/base.conf b/api/conf/base.conf
index 37f99d178..55fdd8fcf 100644
--- a/api/conf/base.conf
+++ b/api/conf/base.conf
@@ -11,14 +11,10 @@ evolutionplugin=disabled
 
 play.filters.cors.preflightMaxAge = 3 days
 play.filters.cors.allowedHttpMethods = ["DELETE", "GET", "PATCH", "POST", "PUT", "OPTIONS"]
-play.filters.cors.allowedHttpMethods = ["DELETE", "GET", "PATCH", "POST", "PUT", "OPTIONS"]
 play.filters.cors.allowedOrigins = [
   "https://app.apibuilder.io",
-  "https://app.apibuilder.org",
-  "http://localhost:5173"
+  "https://app.apibuilder.org"
 ]
-
-
 play.http.errorHandler = "io.apicollective.play.ErrorHandler"
 play.http.filters = "io.apicollective.play.LoggingFilter"
 play.http.parser.maxMemoryBuffer=10M
diff --git a/api/conf/devandtest.conf b/api/conf/devandtest.conf
index 445106913..6e98a539c 100644
--- a/api/conf/devandtest.conf
+++ b/api/conf/devandtest.conf
@@ -9,3 +9,5 @@ play.http.secret.key="development:uauTKwTxIpP4dWJA53s1ekGwpPdVfUmdCmSMgxa4"
 
 mail.localDeliveryDir="/tmp/email.apibuilder"
 
+play.filters.cors.allowedOrigins += ["http://localhost:5173"]
+