diff --git a/config/initializers/08-rack-cors.rb b/config/initializers/08-rack-cors.rb
index 5ad5c4ac546..e37038193b6 100644
--- a/config/initializers/08-rack-cors.rb
+++ b/config/initializers/08-rack-cors.rb
@@ -15,6 +15,7 @@ if GlobalSetting.enable_cors && GlobalSetting.cors_origin.present?
       end
 
       headers['Access-Control-Allow-Origin'] = origin || @origins[0]
+      headers['Access-Control-Allow-Credentials'] = "true"
       [status,headers,body]
     end
   end