diff --git a/apps/favorites/urls.py b/apps/favorites/urls.py
index 4b8e8088..80498e65 100644
--- a/apps/favorites/urls.py
+++ b/apps/favorites/urls.py
@@ -1,12 +1,12 @@
 """Favorites urlpaths."""
 from django.urls import path
-from . import views
 
+from . import views
 
 app_name = 'favorites'
 
 urlpatterns = [
     path('establishments/', views.FavoritesEstablishmentListView.as_view(),
          name='establishment-list'),
-    path('remove/<int:pk>/', views.FavoritesDestroyView.as_view(), name='delete-favorites'),
+    path('remove/<int:pk>/', views.FavoritesDestroyView.as_view(), name='remove-from-favorites'),
 ]
diff --git a/project/settings/base.py b/project/settings/base.py
index 4e8a7acc..995391c2 100644
--- a/project/settings/base.py
+++ b/project/settings/base.py
@@ -86,6 +86,7 @@ EXTERNAL_APPS = [
     'rest_framework_simplejwt.token_blacklist',
     'solo',
     'phonenumber_field',
+    'corsheaders',
 ]
 
 
@@ -93,6 +94,7 @@ INSTALLED_APPS = CONTRIB_APPS + PROJECT_APPS + EXTERNAL_APPS
 
 
 MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.locale.LocaleMiddleware',
@@ -103,7 +105,7 @@ MIDDLEWARE = [
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'utils.middleware.parse_cookies',
-    'utils.middleware.CORSMiddleware',
+    # 'utils.middleware.CORSMiddleware',
 ]
 
 ROOT_URLCONF = 'project.urls'
@@ -376,6 +378,12 @@ CONFIRM_EMAIL_TEMPLATE = 'authorization/confirm_email.html'
 
 # COOKIES
 COOKIES_MAX_AGE = 86400  # 24 hours
+SESSION_COOKIE_SAMESITE = None
+
+
+# CORS
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_ALLOW_CREDENTIALS = True
 
 
 # UPLOAD FILES
diff --git a/requirements/base.txt b/requirements/base.txt
index 20773192..1c70e7c2 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -24,5 +24,8 @@ django-rest-framework-social-oauth2==1.1.0
 
 django-extensions==2.2.1
 
+# CORS
+django-cors-headers==3.0.2
+
 # JWT
 djangorestframework-simplejwt==4.3.0
\ No newline at end of file