When client uses withCredentials flag we must modify 'Access-Control-Allow-Origin' response header value.