Added 'Access-Control-Allow-Credentials' header to CORS responses

* Added 'Access-Control-Allow-Credentials' header to CORS responses
* Bumped version to 1.1.1
There's far too much 'woo' here.
Merge pull request #39 from dustincannon/develop

Added 'Access-Control-Allow-Credentials' header to CORS responses