diff --git a/package.json b/package.json
index a72398f..dbaecf5 100644
--- a/package.json
+++ b/package.json
@@ -59,7 +59,7 @@
     "bell": "^6.0.0",
     "bluebird": "^3.1.1",
     "h2o2": "^5.0.0",
-    "hapi": "^11.0.0",
+    "hapi": "^11.1.4",
     "hapi-auth-cookie": "^3.1.0",
     "hapi-auth-jwt2": "^5.1.3",
     "hapi-swagger": "^3.0.1",
diff --git a/src/server.js b/src/server.js
index de7db9a..f0da28d 100644
--- a/src/server.js
+++ b/src/server.js
@@ -51,7 +51,7 @@ export default function( callback ) {
     labels: [ 'api' ],
     routes: {
       cors: {
-        origin: [ 'http://' + SERVER_HOST + ':' + WS_PORT ]
+        origin: [ PROTOCOL + SERVER_HOST + ':' + WS_PORT ]
       }
     }
   });