diff --git a/src/server.js b/src/server.js
index c63d2bd..f53c279 100644
--- a/src/server.js
+++ b/src/server.js
@@ -23,7 +23,7 @@ if (fs.existsSync(process.cwd() + '/public')) {
   server.use(express.static(path.join(__dirname, './public')));
 }
 
-server.use(cors())
+server.use(cors({ origin: true, credentials: true }))
 server.use(server.router)
 
 if ('development' == server.get('env')) {
diff --git a/test/server.js b/test/server.js
index 5b24e95..1286218 100644
--- a/test/server.js
+++ b/test/server.js
@@ -36,7 +36,10 @@ describe('Server', function() {
     it('should respond with json and corresponding resources', function(done) {
       request(server)
         .get('/posts')
+        .set('Origin', 'http://example.com')
         .expect('Content-Type', /json/)
+        .expect('Access-Control-Allow-Credentials', 'true')
+        .expect('Access-Control-Allow-Origin', 'http://example.com')
         .expect(low.db.posts)
         .expect(200, done)
     })