Ability to configure Access-Control-Allow-Credentials and also fix for...

...config not being accessible in accesscontrol.js