Debug cors and auth