Allow credentials in license requests

If the license server is not on the same-origin as the application, CORS headers are needed to permit this. However the XHR.withCredentials option was not set, so cookies were not being sent to the license request, which is a requirement for our setup.