Extensions Host permissions were tied to a test site.

Now entered wildcard so user's self-hosted site will pass CORS.