@Test
public void setAccessControlAllowCredentials() {

  CorsHandler.setAccessControlAllowCredentials(response);
  assertThat(response.getHeader("Access-Control-Allow-Credentials")).isEqualTo("true");
}