fixed cors for /Token endpoint, added an http httpRequestInterceptor