Insert rails-cors before Warden::Manager which is used by devise
Make devise requests more compatible with XHR