update tests with new endpoint
adding withCredentials prop to sinon's fake xmlHttp