Pass withCredentials in response