added support for enabled the `withCredentials` setting in order to pass cookies, regardless of how authentication is handled.