NEVER forget:

axios.defaults.withCredentials = true;

Or you will start crying after hours of analyzing why the communication to your backend-service still is not allowed.