Merge pull request #5349 from avalonmediasystem/cjcolvar-patch-3

Add credentials cors headers for playlist marker edit operations

config/application.rb

@@ -41,7 +41,7 @@ class Application < Rails::Application
     config.middleware.insert_before 0, Rack::Cors do
       allow do
         origins { |source| true }
-        resource '/avalon_marker/*', headers: :any, methods: [:get, :post, :put, :delete]
+        resource '/avalon_marker/*', headers: :any, credentials: true, methods: [:get, :post, :put, :delete]
         resource '/media_objects/*/manifest*', headers: :any, methods: [:get]
         resource '/master_files/*/thumbnail', headers: :any, methods: [:get]
         resource '/master_files/*/transcript/*/*', headers: :any, methods: [:get]
@@ -51,7 +51,7 @@ class Application < Rails::Application
         resource '/master_files/*/caption_manifest/*', headers: :any, methods: [:get]
         resource '/master_files/*/captions', headers: :any, methods: [:get]
         resource '/master_files/*/supplemental_files/*', headers: :any, methods: [:get]
-        resource '/playlists/*/manifest.json', headers: :any, methods: [:get]
+        resource '/playlists/*/manifest.json', headers: :any, credentials: true, methods: [:get]
         resource '/timelines/*/manifest.json', headers: :any, methods: [:get, :post]
       end
     end