title: Refused to set unsafe header "Cookie" error in browser yet request is successful
body: <p>I'm using Angularjs. When I set <code>Cookie</code> header with <code>xhr.setRequestHeader()</code> I get the following error on Chrome:</p>
  
  <pre><code>Refused to set unsafe header "Cookie"
  </code></pre>
  
  <p>However, the <code>Cookie</code> is included into the request and successfully sent to server. I seem to have configured everything correctly to allow <code>Cookie</code> header on server and client:</p>
  
  <p>for server I have these:</p>
  
  <pre><code>Header add Access-Control-Allow-Credentials "true"
  </code></pre>
  
  <p>for client I specify these:</p>
  
  <pre><code>withCredentials
  </code></pre>
  
  <p>Why is this error?</p>