cannot use wildcard in access-control-allow-origin when credentials flag is true
By Henrietta Emmerich at Feb 23 2021