cors controller for preflight requests (cross domain shit and stuff).
cors rm some code
login OPTIONS route -> cors controller