Translations:Manual:CORS/14/en

If you wish the browser to use any cookies it might have for the domain, to keep the current user logged in, you also need to set the $withCredentials field of  to.