Adds withCredentials as option to polymer-xhr and attribute to polymer-ajax

Simple PR to add support for the CORS XHR option `withCredentials` to both polymer-xhr and polymer-ajax.