CORS error when calling /authorization from React app