Added cors support to TokenService.accessCodeToToken