after lots and lots of tinkering with API Gateway and its CORS config, the CORS error is gone. now, I simply get a 404 when calling my endpoint`/signup`.