Answered login to modx from external server (cross domain)

header("Access-Control-Allow-Origin: *");

Fatal error: Call to a member function get() on a non-object

if(isset($_POST) && count($_POST)){
    
    require_once '\modx\config.core.php';
    require_once MODX_CORE_PATH.'model/modx/modx.class.php';
    $modx = new modX();
    $modx->initialize('web');
    $modx->getService('error','error.modError', '', '');

    $username = $_POST['username'];	
    $password = $_POST['password'];	

    $info = array(
        'username' => $username,
        'password' => $password
    );
    $response = $modx->runProcessor('security/login',$info);
    if($response->response['success'] == 1){
        $user['id'] = $modx->user->get('id');
        
        $profile = $modx->user->getOne('Profile');
        $user['fullname'] = $profile->get('fullname');
        $user['email'] = $profile->get('email');

        echo json_encode($user);
    }else{
        echo json_encode($response->response); 
    }
}

header("Access-Control-Allow-Origin: http://www.xyz.com");

header("Access-Control-Allow-Origin: http://www.xyz.com");
if(isset($_POST['username']) && isset($_POST['password'])){
		
	// get username and password from POST array
	$username = $modx->sanitizeString($_POST['username']); 
	$password = $modx->sanitizeString($_POST['password']); 
    if(trim($username) != "" and trim($password) != ""){
		// Load lexicons to show proper error messages
		if (!isset($modx->lexicon) || !is_object($modx->lexicon)) {
			$modx->getService('lexicon','modLexicon');
		}
		$modx->lexicon->load('login');

		$loginContext= isset ($scriptProperties['login_context']) ? $scriptProperties['login_context'] : 
		$modx->context->get('key');

		$addContexts= isset ($scriptProperties['add_contexts']) && !empty($scriptProperties['add_contexts']) ? explode(',', $scriptProperties['add_contexts']) : array();

		$mgrEvents = ($loginContext == 'mgr');

		$givenPassword = $password;

		/** @var $user modUser */
		$user= $modx->getObjectGraph('modUser', '{"Profile":{},"UserSettings":{}}', array ('modUser.username' => $username));

		if (!$user) {
			$ru = $modx->invokeEvent("OnUserNotFound", array(
				'user' => &$user,
				'username' => $username,
				'password' => $password,
				'attributes' => array(
					'loginContext' => $loginContext,
				)
			));

			if (!empty($ru)) {
				foreach ($ru as $obj) {
					if (is_object($obj) && $obj instanceof modUser) {
						$user = $obj;
						break;
					}
				}
			}
			
			if (!is_object($user) || !($user instanceof modUser)) {
				//echo "cant locate account";
				echo $modx->toJSON($modx->error->failure($modx->lexicon('login_cannot_locate_account')));
				exit;
			}
		}

		if (!$user->get('active')) {
			//echo "inactivated accout";
			echo $modx->toJSON($modx->error->failure($modx->lexicon('login_user_inactive')));
				exit;
			}

		if (!$user->passwordMatches($givenPassword)) {
			if (!array_key_exists('login_failed', $_SESSION)) {
				$_SESSION['login_failed'] = 0;
			}
			if ($_SESSION['login_failed'] == 0) {
				$flc = ((integer) $user->Profile->get('failedlogincount')) + 1;
				$user->Profile->set('failedlogincount', $flc);
				$user->Profile->save();
				$_SESSION['login_failed']++;
			} else {
				$_SESSION['login_failed'] = 0;
			}
			//echo "wrong username pass";
			echo $modx->toJSON($modx->error->failure($modx->lexicon('login_username_password_incorrect')));
				exit;
			}
		
			$fullname =  $user->Profile->get('fullname');
			echo '{"success":true,"message":"Welcome '.$fullname.'!"}';
     }else{
			echo '{"success":false,"message":"Please enter username and password"}';
	 }
}

	$.ajax({
		type : "POST",
		url  :"http://www.abc.com/login-check",
        data : "username="+$("#uname").val()+"&password="+$("#upass").val(),
		success: function(responce){
			var responce = jQuery.parseJSON(responce);
			if(!responce.success){
				$(".msg").html("<font color='red'>"+responce.message+"</font>");
			}else if(responce.success){
				$(".msg").html("<font color='green'>"+responce.message+"</font>");
			}
		}
	});