auth0 redirect works

CORS for dev setup