title: $http request doesn't send cookies cross-domain in angular CORS
body: <p>First of all I want to tell that I've read all the questions from Stack and everything related to CORS, but the implementation still doesn't work. My APP is built on top of <a href="https://github.com/angular-app/angular-app">angular crud demo</a>:</p>
  
  <p>So I have in the app config:</p>
  
  <pre><code>$httpProvider.defaults.useXDomain = true;
  $httpProvider.defaults.withCredentials = true;
  delete $httpProvider.defaults.headers.common['X-Requested-With'];
  </code></pre>
  
  <p>and I know they are correctly set (with debugging). In my "Security" app I'm doing a request for the current user, cross-domain:</p>
  
  <pre><code>return $http.get(LAYOUT_CONFIG.baseURL + '/current-user').then(function(response) {
        //service.currentUser = response.data.user;
        service.currentUser = response.data;
        return service.currentUser;
      });
  </code></pre>
  
  <p>I get these headers at the first request:</p>
  
  <pre><code>    Access-Control-Allow-Credentials:true
  Access-Control-Allow-Headers:accept, origin, content-type, cookie
  Access-Control-Allow-Methods:GET,POST
  Access-Control-Allow-Origin:http://admin.vibetrace.com
  Access-Control-Max-Age:1728000
  Connection:keep-alive
  Content-Encoding:gzip
  Content-Type:text/html; charset=utf-8
  Date:Sun, 02 Jun 2013 11:07:49 GMT
  P3P:CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
  Server:nginx/1.1.19
  Set-Cookie:vibetrace.ssid=s%3A2lT2_N0-EevCJt7LbRlJ6Az1.d8xp99st%2F0RNV0VN2D4o4AJXNRT%2F%2F46v8PDVWSAbx%2Fw; Path=/; Expires=Mon, 30 Sep 2013 11:07:49 GMT
  Transfer-Encoding:chunked
  Vary:Accept-Encoding
  X-Cache:MISS
  X-Powered-By:Express
  </code></pre>
  
  <p>So Set-Cookie is there. However, the subsequent $http.get request (from angular) doesn't send the cookie which should have been previously set.</p>
  
  <pre><code>Accept:application/json, text/plain, */*
  Accept-Encoding:gzip,deflate,sdch
  Accept-Language:en-US,en;q=0.8
  Cache-Control:no-cache
  Connection:keep-alive
  Host:app.vibetrace.com
  Origin:http://admin.vibetrace.com
  Pragma:no-cache
  Referer:http://admin.vibetrace.com/
  User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
  </code></pre>
  
  <p>but here comes the interesting part. If I run the following code in the console:</p>
  
  <pre><code>$.ajax("https://app.vibetrace.com/current-user", {
              type: "GET",
              success: function(data, status, xhr) {               
              },
              xhrFields: {
                  withCredentials: true
              },
              crossDomain: true
          });
  </code></pre>
  
  <p>the request header contains the cookies. </p>
  
  <pre><code>Accept:*/*
  Accept-Encoding:gzip,deflate,sdch
  Accept-Language:en-US,en;q=0.8
  Cache-Control:no-cache
  Connection:keep-alive
  Cookie:fbm_245656478789760=base_domain=.vibetrace.com; __utma=199448574.828439508.1336934706.1361539088.1361819816.356; __utmc=199448574; __utmz=199448574.1361819816.356.354.utmcsr=tenlister.com|utmccn=(referral)|utmcmd=referral|utmcct=/index.php; connect.sid=s%3AZ1o9bIw0jBOmQwuhKJDG1San.%2BfshIsvupiRuK0pUJqm8EAMnMBCyxf%2Fk17cAVzcy31w; __utma=173003172.1796845739.1355503443.1369827921.1369833348.68; __utmc=173003172; __utmz=173003172.1369410587.66.5.utmcsr=stage.marketizator.com|utmccn=(referral)|utmcmd=referral|utmcct=/app/builder/; vibetrace.ssid=s%3AV6biojefu9r5DTGErKL5vYPi.KAlnWMUm8jZmPV0MpP%2FrgqwmkF6WuXEZZDyzJhozYCs
  Host:app.vibetrace.com
  Origin:http://admin.vibetrace.com
  Pragma:no-cache
  Referer:http://admin.vibetrace.com/
  </code></pre>
  
  <p>What I'm missing?</p>