hooked up authentication service, configured cors, modified http headers to programmatically change content-type