Apply CORS properly

[chrispaskvan]

Description: CORS (Cross-Origin Resource Sharing) configuration needs to be properly applied to allow requests from localhost during development while maintaining security in production.

Problems:

• API requests from localhost:1101 may be blocked by CORS policy
• CORS configuration may not be properly loading development vs production settings
• Express CORS middleware may not be correctly configured

Solution:

• Update CORS configuration to properly load development settings
• Ensure localhost origins are allowed in development environment
• Verify CORS middleware is properly applied in Express application
• Test that API requests from allowed origins work correctly

Files Affected:

• express.js - CORS middleware configuration
• cors.development.json - Development CORS settings
• cors.production.json - Production CORS settings

Testing:

• Verify API requests from localhost:1101 work in development
• Verify CORS headers are properly set in responses
• Verify production CORS settings are restrictive and secure