Disabling CORS token authentication