Session Cookie Bugfix

Turns off XHR credentials for CSRF request to fix login bug