Do not send the auth cookie if an authentication is set on the client

Set the default authentication object to null.

Use credentials: 'include' only if the auth object is null, otherwise use only the authentication defined on the client.