Fix logic for cors cache match …
The current logic for a cors cache match does not consider "credentials is false and request's credentials mode is not "include" or credentials is true."