Authentication fails because of CORS protocol errors and changing session ID

[t-lichtenstein]

Solved by adding credentials parameter and origins at the api server cors plugin and by adding the withCredentials option to the post request at the frontend