Default on Cookie support in CORS