Merge pull request #371 from walmartlabs/user/eran

CORS allow-credentials