Add httpOptions.xhrWithCredentials to set withCredentials on XHR object