we only want to set withCredentials true if the resource has auth setup as crossDomain