fix: added access-control-allow-origin header to auth routes (#299)

fix: added access-control-allow-origin header to auth routes (#299) #1385