add credentials headers on OPTIONS request
Merge pull request #17 from railsme/master

add AllowCredentials header on OPTIONS request