Added allow credentials header