Fixing use of Credentials on X-Domain XHR requests