Fix CORS to allow credentials
Merge pull request #107 from mozilla-services/fix-cors-credentials

Fix CORS to allow credentials