cros-anywhere

当access-control-allow-credentials '*'. need `access-control-allow-origin` is to all is cookie be  instead ( when access-control-allow-origin需要显式指定来源域名, this transfer origin-host 而不是之前的* need do 为 other for true access-control-allow-credentials  plugin domain), of true of 时(跨域传递cookie),