When allowCredentials istrue, allowedOrigins cannot contain the special value "*" since that cannot be seton the "Access-Control-Allow-Origin" response header. To allow credentials to a setof origins, list them explicitly or consider using "allowedOriginPatterns" instead.