diff --git a/bin/server.js b/bin/server.js
index defd5e9..8482b4a 100644
--- a/bin/server.js
+++ b/bin/server.js
@@ -83,7 +83,10 @@ class Server {
       // Enable CORS for testing
       // THIS IS A SECURITY RISK. COMMENT OUT FOR PRODUCTION
       // Dev Note: This line must come BEFORE controllers.attachRESTControllers()
-      app.use(cors({ origin: '*' }))
+      app.use(cors({
+        origin: '*',
+        allowMethods: 'GET,HEAD,PUT,POST,DELETE,PATCH,OPTIONS'
+      }))
 
       // Wait for any adapters to initialize.
       await this.controllers.initAdapters()
diff --git a/config/system-user-dev.json b/config/system-user-dev.json
index bc75b4b..76aa4ed 100644
--- a/config/system-user-dev.json
+++ b/config/system-user-dev.json
@@ -1,6 +1,6 @@
 {
-  "password": "bDZWE3vEO7Ufvil2s8Ko",
+  "password": "TRJkYBg4qDNLZfG5PJO6",
   "email": "system@system.com",
-  "id": "66e38befd548c285159a7084",
-  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY2ZTM4YmVmZDU0OGMyODUxNTlhNzA4NCIsImlhdCI6MTcyNjE4ODUyN30.h31T7o2Si1ZOTgCf91IC4KNdkmaCqs5FNWEXysdnYTg"
+  "id": "66e48033071977ff258c24ce",
+  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY2ZTQ4MDMzMDcxOTc3ZmYyNThjMjRjZSIsImlhdCI6MTcyNjI1MTA1OX0.RLjnUWy6NziVem0ciFcjfaQz_lplnNfxAZUEceygTf8"
 }
\ No newline at end of file