Update XmlHttpRequestConnection.js

Set 'withCredentials = true' on XMLHttpRequest for CORS support