Hi,
i have read your project description and interested to assist.
issue 1 -3 is easy task, but for issue no 4, i need to see the login method, since this CORS usually happen because accessing outside the domain, some case can be fixed, same case not.
please feel free to have discussion.
regards,
Romi