set withCredentials true to allow for cross domain

Need to set  withCredentials:true to allow for cross-domain requests. Tested on my local setup and doesn't seem to do any harm when the request is not cross domain