[Bug 1086908] Add CORS to get_token API.