Have CORS_ALLOWED_ORIGINS change based on environment

[TangoYankee]

Is your feature request related to a problem? Please describe.
Allowed origins should be based on the environment where the application is running

Describe the solution you'd like
Based on an environment variable, change the allowed origins to match the environment.

• Develop Env: ["http://localhost:3000", "http://127.0.0.1:3000", "http://lvh.me"]
• Prod Env: ["https://woaq.org"]

Describe alternatives you've considered
Leaving the settings hard-coded and all origins available in all environments

Additional context
Hard coding the options is a quick and dirty way to get the initial feature working. However, this means that the production api can be accessed from local instances of the application. The production api should only be available to the production site.

Labels

• Add a status label
  • needs definition
  • needs help
  • ready to work on
  • in progress
  • backlog
• Add additional labels as needed

For Developers

Affected Components
CORS_ALLOWED_ORIGINS list

Technical Resources
Python Django Environment Variables

Testing Outline
Manual testing prod and develop envs