Why isn't my endpoint restricted using npm CORS?

Question

I am trying to restrict GET requests to a single domain. I have download the cors npm package and set it up as shown below but it doesn\'t seem to be working when I visit t