update preflight response to be consistent with CORS plugin. Pass through origin when plugin configured with a wildcard and credentials are being sent.