added request origin

config/environments/production.rb

@@ -47,7 +47,7 @@ Rails.application.configure do
   # Mount Action Cable outside main process or domain
   # config.action_cable.mount_path = nil
   config.action_cable.url = 'wss://polyglot-173.herokuapp.com/cable'
-  config.action_cable.allowed_request_origins = [ '*' ]
+  config.action_cable.allowed_request_origins = [ 'https://polyglot-173.herokuapp.com/' ]
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
   config.force_ssl = true