Use jQuery xhrFields withCredentials

Without this option, it's not possible to discover apis using Basic
Authentication and CORS.

@see http://bugs.jquery.com/ticket/8146