title: Unable to get Set-Cookies header from a Django API
body: <p>I am getting these errors when I am trying to hit a Django API.
  I have used ReactJS for Frontend and DjangoREST for Backend. </p>
  
  <p>When withCredentials is set False, I got this error.</p>
  
  <blockquote>
    <p>Failed to load <a href="https://retailo-dot-dogwood-keep-190311.appspot.com/admin/" rel="nofollow noreferrer">https://retailo-dot-dogwood-keep-190311.appspot.com/admin/</a>: Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers in preflight response.
    login-form.jsx:58</p>
  </blockquote>
  
  <p>When True, I got this error.</p>
  
  <blockquote>
    <p>Failed to load <a href="https://retailo-dot-dogwood-keep-190311.appspot.com/admin/" rel="nofollow noreferrer">https://retailo-dot-dogwood-keep-190311.appspot.com/admin/</a>: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. Origin '<a href="http://localhost:3000" rel="nofollow noreferrer">http://localhost:3000</a>' is therefore not allowed access. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.</p>
  </blockquote>
  
  <p>I have used Axios and this is my code.</p>
  
  <pre><code>     axios.get('https://retailo-dot-dogwood-keep-190311.appspot.com/admin/',{ 
          // withCredentials: true,
       headers: {
       'Access-Control-Allow-Origin': 'include',
       'Content-Type': 'application/json',
       },
      // credentials: 'same-origin',
      })
      .then(function (response) {
          console.log(response);
      })
      .catch(function (error) {
          console.log(error);
      });
  </code></pre>