I have a project that is having issues with CORS in production. In order to reproduce it I have exposed my localhost instance to ngrok. First time I got the CORS error as I expected, but not anymore, do I have to configure something else?