diff --git a/cmd/web/bootstrap/bootstrap.go b/cmd/web/bootstrap/bootstrap.go
index 9ce57c2..a4e75cd 100644
--- a/cmd/web/bootstrap/bootstrap.go
+++ b/cmd/web/bootstrap/bootstrap.go
@@ -2,7 +2,6 @@ package bootstrap
 
 import (
 	"fmt"
-	"net/http"
 	"time"
 	"tm/pkg/authorization"
 	"tm/pkg/config"
@@ -87,9 +86,8 @@ func InitHTTPServer(conf Config, log logger.Logger) *echo.Echo {
 	e.Use(middleware.RequestID())
 	e.Use(middleware.Logger())
 	e.Use(middleware.CORSWithConfig(middleware.CORSConfig{
-		AllowOrigins: []string{"*"}, // TODO: Configure properly for production
-		AllowMethods: []string{http.MethodGet, http.MethodPost, http.MethodPut, http.MethodDelete, http.MethodOptions},
-		AllowHeaders: []string{echo.HeaderOrigin, echo.HeaderContentType, echo.HeaderAccept, echo.HeaderAuthorization},
+		AllowOrigins: []string{"*"},
+		AllowMethods: []string{echo.GET, echo.POST, echo.PUT, echo.DELETE, echo.OPTIONS},
 	}))
 
 	// Add custom middleware for logging