Allow-Cross-Origin Domain to access /verify

still noooo!