CORS error when authenticating a webtask