Fixed xhr.withCredentials in IE10