$wgRestAllowCrossOriginCookieAuth