Debug cors issue with authentication