Allow credentials for CORS.