Allow-Cross-Origin Domain to access /verify

nooooooo!