Added withCredentials: true to every $http request to enable CORS