Login header request added

Added Access-control-allow-origin