CORS OAuth errors fixed