Refactored `Local Auth` to not redirect `CORS` requests from a browser, and return a success message