JSONLoader: Moved .withCredentials under .open. See #2927.