adds credentials to fetch so the cookie is set in the headers and the fetch works successfully in safari