[bug 972919] Removed CORS logic

In the previous Login strategy, other app's views would query the Login
server directly. This required the Login server to use custom middleware to
check CORS headers sent along with each request. Since each server now
communicates with Login on behalf of their views (using webmaker-auth &
webmaker-auth-client) the CORS logic is no longer needed.