当Access-Control-Allow-Credentials 为 true 时(跨域传递cookie), Access-Control-Allow-Origin需要显式指定来源域名, 而不是之前的*
When Access-Control-Allow-Credentials is true ( need transfer cookie for other domain), `Access-Control-Allow-Origin` need to be origin-host instead of '*'. This is all of Plugin do
