API and CORS

btrade wrote:

I read this instruction and put everything…

What did you mean by “put everything”? If you enable that option and check the generated .htaccess, you should find the required header is added:
Header set Access-Control-Allow-Credentials "true"You should check HTTP response and see if the header is outputted by your Apache server. If not, you better review your Apache config.