CORS headers for /oauth2/v1/token

Thanks for responding and suggestion.