Got CORS right, login successful, showing my username.