fix

api/main.py

@@ -54,7 +54,7 @@ print("db loaded")
 mode = 'run'
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],
+    allow_origins=["https://video.choozmo.com/"],
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=['Accept','Content-Type','X-Requested-With','x-api-key'],