Setting withCredentials on xhr