Bug 1091660 - Add CORS for new login routes

This will be updated in a different patch.