auth happening with CORS drupal module installed