Updating auth

.env.example

@@ -15,6 +15,11 @@ API_BASE_URL=http://localhost:3000
 API_PORT=3000
 API_SESSION_TTL=86400
 
+# Set to a specific origin (e.g. https://yourapp.com) when deploying to
+# production with a separate frontend origin.  Use "*" (the default) in
+# development with the Vite proxy, where CORS is not an issue.
+CORS_ORIGIN=*
+
 UI_PORT=8080
 
 VALKEY_HOST=localhost