Bug 1091660 - Add CORS for new login routes