Some IE7 browsers do not implement withCredentials on
their XHR object and always setting it explicitly
(even if setting to null) causes those browsers to
fail.