very nice article. I thought I understood CORS but learned some new things: * not all cross origin requests need to be preflighted * to use credentials, server

very nice article. I thought I understood CORS but learned some new things: * not all cross origin requests need to be preflighted * to use credentials, server needs to explicitly allow credentials to be sent from client