Redirect after authorization for JS use

And removed users.uid column, no longer used.
Allow CORS request