changed one of login return codes from 403 to 401
1) replaced twitter with linkedin authentication. 2) allowed all cors origins.