Trying a CORS post to login