limit cors

backend/main.mjs

@@ -78,7 +78,13 @@ app.use(
     })
 );
 app.use(morgan('combined'));
-app.use(cors());
+
+const corsOptions = {
+    origin: ['https://alloca.space', 'https://www.alloca.space'],
+    optionsSuccessStatus: 200
+};
+
+app.use(cors(corsOptions));
 
 // POST
 const limiter20 = RateLimit({