fetch won’t send cookies in older browsers
unless you set the credentials init option.
See https://github.com/whatwg/fetch/pull/585

Closes https://gitlab.com/gitlab-org/gitlab/issues/36864