The settings CORS_ALLOW_ALL_ORIGINS was set to True by default. This error is inherited from a old mistake made back in the days while working on the initial impress demo. This is not something we want, this should be only allowed in development. We change the value in all the manifests in order to have the desired behavior in non development environments.