adding withCrendentials=true to xhr

We having issues with MacOsX/Safari not being able to retrieve VAST from our server without this setting. Chrome and Firefox seem to work fine without it.

thanks in advance for looking into this.