docs, bowerjson, withCredentials - CORS: sets "Cookie" - XDomain: sets "XDomain-Cookie"