Change credentials value to 'include' based on Fetch specs

[camsong]

According to Fetch specs, this is no cors option in credentials, should be include instead. https://fetch.spec.whatwg.org/#concept-request-credentials-mode