add withCredentials attribute support to XMLHttpRequest

add XMLHttpRequest.withCredentials attribute support