* Add SITE_URL env var
* Debug git branch
* Set site URL to "false"
* Bug fix
* Fix CORS allowed methods
* Upgrade kcors
* Fix for API HOST in review apps
* Review app fixes
* Add bin/bash
* Refactor site URL code
* Cleanup API host
* Set test header
* Add security headers
* Update CSP to allow inline scripts and images
* Add empty string as API host value
* Add API host to CSP
* Use empty string if env var missing
* Add WSS and HTTPS protocols
* Undo app JSON change
* Set all headers in single object
* Fix typos