Fixed whitelisting: missing protocol prefix.

pv/settings.py

@@ -30,8 +30,8 @@ ALLOWED_HOSTS = ['127.0.0.1', 'localhost']
 
 # Whitelist IPs that access the API
 CORS_ORIGIN_WHITELIST = (
-   'localhost',
-   'localhost:8080'
+   'http://localhost',
+   'http://localhost:8080'
 )