add rails cors gem. Login from other side but credential fails