add withCredentials attribute support to XMLHttpRequest