Disable credential flag for CORS requests on images