ajax 请求session不一致问题

直接上代码

前端：
ajax：属性添加
xhrFields:{
withCredentials:true
},
crossDomain: true,

---

后端：
请求头添加
response.addHeader(“Access-Control-Allow-Origin”, request.getHeader(“origin”));
response.setHeader(“Access-Control-Allow-Headers”, “x-requested-with,Cache-Control,Pragma,Content-Type,Token, Content-Type”);
response.setHeader(“Access-Control-Allow-Methods”, “POST, GET, OPTIONS, DELETE”);
response.setHeader(“Access-Control-Max-Age”, “3600”);
response.setHeader(“Access-Control-Allow-Credentials”, “true”);
response.setHeader(“XDomainRequestAllowed”,“1”);