c067c03662
Add CORSMiddleware configured to: - Allow the frontend origin (web_base_url) - Allow credentials (cookies) - Allow all methods and headers This fixes cross-origin requests between frontend and API when they're on different subdomains.