Dont set credentials by default for ajax requests. Fixes issue #261
merge