Confused about CORS and login button

Subdomains would work. If you are still getting some CORS error, its likely that something else is interfering at your host or your stack.