Add withCredentials flag for global fetch

[ofirattia]

Supporting CORS, fixing issue when using session id not on the same domain, on the global fetch there is withCredentials flag, if its true it will set the credentials to "include" otherwise to same-origin.