First Checkin - supports login without CORS