Fixed: Firefox needs the XHR to be async when using withCredentials=true.