xhrFields for withCredentials: true to ajax requests. #2097