setting withCredentials after open to comply with standard and fix older android device functionality