(#2424) - add cors credentials to errors.md

Forgot to add this when I originally wrote this
error page. Not every user will use credentials,
but it's probably better to just have them enable
everything and then tweak it later after it works.