Move CORS_ALLOWED_ORIGINS to base settings

SciPost_v1/settings/base.py

@@ -466,3 +466,9 @@ MAILGUN_API_KEY = ''
 # Get one at https://haveibeenpwned.com
 HAVE_I_BEEN_PWNED_TOKEN = get_secret('HAVE_I_BEEN_PWNED_TOKEN')
 HAVE_I_BEEN_PWNED_API_KEY = get_secret('HAVE_I_BEEN_PWNED_API_KEY')
+
+
+# CORS headers
+CORS_ALLOWED_ORIGINS = [
+    'https://scipost-codebases.org'
+]

SciPost_v1/settings/production.py

@@ -72,9 +72,3 @@ sentry_sdk.init(
 )
 CSP_REPORT_URI = get_secret('CSP_SENTRY')
 CSP_REPORT_ONLY = False
-
-
-# CORS headers
-CORS_ALLOWED_ORIGINS = [
-    'https://scipost-codebases.org'
-]