# only for use in development
cors:
  allow_any_origin: true