CORS
TEST CORS
curl -v -X OPTIONS "https://login.salesforce.com/services/oauth2/token"
In the response headers if you the following output, then CORS is enabled.
...
< access-control-allow-origin: *
< access-control-allow-headers: Content-Type
< access-control-allow-methods: OPTIONS,POST
...