Access-Control-Allow-Credentials should not be included if set to false

[Antoine Augusti]

According to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials

If you don't need credentials, omit this header entirely (rather than setting its value to false).