added flask-cors and used allow cross_allowed_origins to fix the issue seen on prod cluster (400 CORS error)