Allow credentials in cors

Need to set allow origin to the origin domain. Credentials doens’t work
with wildcard origin