using browser cookies implementation in xhr with withCredentials