fixed the CORS issue with accessing Web Server TokenEndpoint