Added 'Access-Control-Allow-Credentials' header to CORS responses

* Added 'Access-Control-Allow-Credentials' header to CORS responses
* Bumped version to 1.1.1