i was able to get login working and the token to automatically get added to my request, but for some reason it doesn't work in safari or chrome incognito. previously the token wasn't being set because i had to have

front-token

in the

Access-Control-Expose-Headers

and adding that fixed it for chrome. is there something else that i am missing for it to work in safari?