Local auth - Fix cross-origin request headers, update routing for local auth

#3, #15, #56