diff --git a/ptools/settings.py b/ptools/settings.py
index 79723e2..688444f 100644
--- a/ptools/settings.py
+++ b/ptools/settings.py
@@ -35,9 +35,6 @@ SECRET_KEY = 'django-insecure-6wrh^t$@gbb^s^=79@%cv=%yhq6gl^kane#g@-n-*n6+s1lo2f
 DEBUG = True
 
 ALLOWED_HOSTS = ['*']
-CORS_ORIGIN_ALLOW_ALL = True
-if os.environ.get('HTTPS_DOMAINS'):
-    CSRF_TRUSTED_ORIGINS = [os.environ.get('HTTPS_DOMAINS'), ]
 
 # Application definition
 
@@ -299,3 +296,9 @@ SIMPLEUI_CONFIG = {
         }, ]
     }]
 }
+
+CORS_ALLOW_CREDENTIALS = True
+CORS_ALLOW_ALL_ORIGINS = True
+CORS_ALLOW_HEADERS = '*'
+if os.environ.get('HTTPS_DOMAINS'):
+    CSRF_TRUSTED_ORIGINS = [os.environ.get('HTTPS_DOMAINS'), ]