Allow CORS for login URL

yep