Enable withCredentials flag also for requests sent to /info

It could be useful to have access to cookies and authorization headers also for cross-site requests sent to /info, for example when using an authorization middleware.

This is what the patch does.