Allow-Cross-Origin Domain to access /verify

So I'm having trouble getting this to work with `.post()` route only. For `.get()` it's working fine though.