I'm not the person you asked but I have my frontend hosted separately from the Heroku backend. CORS was a bit of a pain at first, mostly because I had never had to deal with it before, but after initial setup I never think about it.