test login Post access-control-allow-origin