CORS with login and registration support