Move credentials out of network or cache fetch since it ties in with CORS https://www.w3.org/Bugs/Public/show_bug.cgi?id=26769