cros-anywhere

access-control-allow-credentials  to be  true transfer 当access-control-allow-credentials is need true of all plugin of 而不是之前的* is domain), other do for when origin-host need access-control-allow-origin需要显式指定来源域名, cookie 时(跨域传递cookie), instead ( '*'. 为 `access-control-allow-origin` this