CORS error persists in oAuth even after setting header

[BarryCarlyon]

@nischal_dutt

For reference, my server code is similar to this

How is your code different?