diff --git a/lib/XMLHttpRequest.js b/lib/XMLHttpRequest.js
index 4f3fe03..76b488c 100644
--- a/lib/XMLHttpRequest.js
+++ b/lib/XMLHttpRequest.js
@@ -110,6 +110,10 @@ exports.XMLHttpRequest = function() {
   this.responseXML = "";
   this.status = null;
   this.statusText = null;
+  
+  // Whether cross-site Access-Control requests should be made using
+  // credentials such as cookies or authorization headers
+  this.withCredentials = false;
 
   /**
    * Private methods
@@ -364,7 +368,8 @@ exports.XMLHttpRequest = function() {
       path: uri,
       method: settings.method,
       headers: headers,
-      agent: false
+      agent: false,
+      withCredentials: self.withCredentials
     };
 
     // Reset error flag
@@ -400,7 +405,8 @@ exports.XMLHttpRequest = function() {
             port: url.port,
             path: url.path,
             method: response.statusCode === 303 ? "GET" : settings.method,
-            headers: headers
+            headers: headers,
+            withCredentials: self.withCredentials
           };
 
           // Issue the new request