do we need to configure CORS? Still deciding whether or not to separate frontend and backend to run off of their own separate servers.