Make `withCredentials` a param allowing caller to set
1.3.1