Fixes #522: Added Access-Control-Allow-Credentials to the preflight handler