Fix cors regex

[camallen]

match the zooniverse domains we deploy and test on, update the gemfile lock file as well