When I do things locally my CORS calls are working fine
$ curl -i -X OPTIONS \"http://localhost:3000/api/v1/login\" HTTP/1.1 200 OK X-Powered-By: Express Acc
I filed a ticket for this, as it turned out, things were not easy to troubleshoot, but the answer is very simple: make your calls using https instead of http