isolate the credentialed (user sessions) requests from non-credentialed (API) into distinct methods.
This will fix ensure we don't run across CORS errors when using credentialed XMLHTTPRequests for open (wildcard) cors origins and will whitelist allowed cors origins for credentialed resource requests
isolate the credentialed (user sessions) requests from non-credentialed (API) into distinct methods.
This will fix ensure we don't run across CORS errors when using credentialed XMLHTTPRequests for open (wildcard) cors origins and will whitelist allowed cors origins for credentialed resource requests