#3415987 - fixed missing credentials in XHR call in cross domain setup.
This MR adds xhrFields to $.ajax call, to add cookie with session to the multi domain call. This depends on proper setup of site (cors config, etc), but I assumed it's out of scope for this change.