Serverless Stack

With `allowOrigins: ['*']` I got CORS error `WildcardOriginNotAllowed`

you can't use wildcard with `allowCredentials: true`

<https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin>

I want to be able to transfer `Cookie`/`Authorization` headers.  Can I do it without `allowCredentials: true`?

`allowCredentials: false` to me works fine for devel, even though `Authorization`  header is used, dunno how is it possible

```{
            allowOrigins: ['*'],
            allowMethods: [CorsHttpMethod.ANY],
            allowCredentials: false, // TODO investigate why it can be false when sending authorization header
            allowHeaders: ['Authorization', 'content-type'],
          }```
snippet from my stack :smile:

<@U0352TGKWE8> <https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/withCredentials>

I did read that, but as I said I am still able to send `Authorization`  header. Anyway whitelisting localhost explicitly worked fine as well.