Remove duplication
Cookie Auth
Add CORS support with annotations. Add tests