withCredentials
Set withCredentials to true to send cookies to the
Important note: when responding to a credentialed request, server must specify a domain, and cannot use wild carding.
The header Access-Control-Allow-Credentials: true must be set for withCredentials to work