Add withCredentials to XHR object

 - This enables us to use with cookies across domains