+ Add CORS and open redirect to login via query params