We are using custom policies in an azure adb2c sign in flow. We are using custom UI with no custom/client side scripting. We have configured CORS on the underlying storage account and all seems well for every user except 1 who complains that they cannot login to the application we are protecting with AADB2C. We passed them a test flow url and the response they received was the AADB2C90047: The Resource ... contains scripts.... etc....looking at docs that points to CORS but every other user is logging in fine...........Is there anywhere else we could look? This user can login from their home PC but can't from their work pc/network.