Allow withCredentials flag