Fix token generation error
Add header to allow chrome CORS