switched out remember me with better token auth; still can't get cors to work
fixed cors; added Json Authentication filter