Merge pull request #39 from dustincannon/develop

Added 'Access-Control-Allow-Credentials' header to CORS responses