web: cors: allowed-origins: [ http://localhost, http://localhost:4200 ]