Add CORS response to auth requests