Hi @theStacks
Welcome to the Auth0 Community!
I am sorry about the late reply to your inquiry!
It appears that you are making an XMLHttpRequest or Fetch to a different domain than your page is on whenever the page is refreshed. Due to the nature of CORS , for every request made to a domain, an HTTP cookie is attached to it, thus blocking the request that you are trying to makes.Also, any calls made to the /authorize endpoint should be made via front-channel HTTP requests. They should only be made via a redirect or other top-level browser navigation and this is why CORS is not supported.
If you have any other questions, feel free to leave a reply or post again on the community!
Kind Regards,
Nik