v3.0.3

Released to keep tag integrity, equivalent to v3.0.0
Earlier releases pulled

• BREAKING CHANGES / Fixes
  • Remove allow-credentials when set to false (thanks @AntoineAugusti)
  • Don't halt non-CORS OPTIONS requests