Add credentials for CORS requests, adapt config for heroku, update
browserid shim