diff --git a/booking_system/settings.py b/booking_system/settings.py
index bcc70e3..029c7bb 100644
--- a/booking_system/settings.py
+++ b/booking_system/settings.py
@@ -15,14 +15,17 @@ DEBUG = os.getenv('DEBUG', 'False').lower() == 'true'
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
 
 CORS_ALLOWED_ORIGINS = [
-    'https://attunehearttherapy.com'
+    'https://attunehearttherapy.com',
+    'https://www.attunehearttherapy.com',
+    'https://api.attunehearttherapy.com',
 ]
 
 CORS_ALLOW_CREDENTIALS = True
 
 CSRF_TRUSTED_ORIGINS = [
     'https://api.attunehearttherapy.com',
-    'https://attunehearttherapy.com'
+    'https://attunehearttherapy.com',
+    'https://www.attunehearttherapy.com',
 ]
 
 INSTALLED_APPS = [