track CORS: Use Credentials, same-origin, with headers, redirects to not same-origin, with headers

Running, 0 complete, 1 remain

Test id: bd7ac37f-8a78-4a26-b8db-385dfb92c21a