This problem exists from Orion 1.3.17 and was fixed in 1.3.18 (1) and then it was broken again in 1.3.18 (2).
It is still not fixed in 1.3.19
Looks like something wrong with cors requests under the hood of Orion.
Maybe Orion doesn't include Cookies under orion-cross?
