Fix CORS implementation with credentials.

It's not possible to return a wildcard when using credentials, so it's needed
to return the actual origin that's being authorized.
Merge pull request #263 from mozilla-services/fix-cors-credentials-implementation

Fix CORS implementation with credentials.