The call method accepts an options object. The httpClient.post method accepts an options object.
Within this options object is a withCredentials flag. It does not appear that this flag is pushed down to the httpClient.post method in the _invoke method.