feat(InboxAPI): support setting HTTP headers and withCredentials flag

These options allow flexibility for authentication strategies, to some degree, by enabling the use
of auth tokens present in headers or cookies to be sent off to the web service.