Configure CORS before validating the auth token