update

app/Http/Middleware/CORS.php

@@ -22,7 +22,7 @@ class CORS
             'Access-Control-Allow-Methods'=> 'POST, GET, OPTIONS, PUT, DELETE',
             'Access-Control-Allow-Headers'=> 'Origin, X-Requested-With, Content-Type, Accept',
             
-            'Access-Control-Allow-Credentials'=> 'false',
+            'Access-Control-Allow-Credentials'=> 'true',
         ];