Add withCredentials to xhr