withCredentials default to false for browserify, closes #22