Added withCredentials property to fake xhr

Cross browser pattern to detect if CORS is supported is to create a XHR
object and see if “withCredentials” property is present. Without this
property, tests that use fake XHR will go through the code path asuming
that CORS is not supported.