Add support for multiple origins when using CORS
Make sure that requests can use credentials with X_DOMAINS=*
Merge branch '532' into develop
Changelog update for #532