Change value of Access-Control-Allow-Origin when credentials are not supported