Added withCredentials: true for any http request