Add withCredentials parameter in AJAX requests