[Bug 1086908] Add CORS to get_token API.

This adds the CORS mixin to the DRF get_token view.

r?