Allow use of cookie in CORS scenario