CORS improvements, and credential capability on frontend
CORS improvements, and credential capability on frontend