Fixed cors issue on token.