Add withCredentials option. Fix #29

can we default it to true.

We can use `if (options.withCredentials !== false) {` ?