CORS trouble (www vs no-www)

{"ops":[{"insert":"Not sure if this is a known issue, but the login workflow fails if a browser is visiting the site with https://www.archidekt.com/ but it works fine from https://archidekt.com/\n\nMaybe the wrong branch or env got pushed to prod by mistake?\nconsole errors from www.archidekt.com: \n\n17:59:51.874 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at "},{"attributes":{"link":"https://archidekt.com/api/rest-auth/login/"},"insert":"https://archidekt.com/api/rest-auth/login/"},{"insert":". (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘http://localhost:3000’)."},{"attributes":{"blockquote":true},"insert":"\n"},{"insert":"17:59:51.888 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at "},{"attributes":{"link":"https://archidekt.com/api/rest-auth/login/"},"insert":"https://archidekt.com/api/rest-auth/login/"},{"insert":". (Reason: CORS request did not succeed)."},{"attributes":{"blockquote":true},"insert":"\n"},{"insert":"\n"}]}