Fixes #4384.
Update ActiveRecordInterface.php

fixes #3026
#4310: Removed `$data` from signature of `yii\rbac\ManagerInterface`
Fixed test break.
#4388: CORS filter fixes:

- Upgrade the documentation to match filter code
- Fix bad default behavior with Access-Control-Allow-Credentials
- Fix missing "s" in header Access-Control-Request-Method / Access-Control-Allow-Methods