Get the token authentication and registration working with CORS unable