diff --git a/README.md b/README.md
index 4ee0774..f821cd1 100644
--- a/README.md
+++ b/README.md
@@ -182,6 +182,9 @@ A `FileUploadResult` object is passed to the success callback of the
 
 - Does not support `responseCode` or `bytesSent`.
 
+### Browser Quirks
+
+- __withCredentials__: _boolean_ that tells the browser to set the withCredentials flag on the XMLHttpRequest
 
 ## download
 
@@ -230,6 +233,10 @@ __Parameters__:
 
 - Download requests is being cached by native implementation. To avoid caching, pass `if-Modified-Since` header to download method.
 
+### Browser Quirks
+
+- __withCredentials__: _boolean_ that tells the browser to set the withCredentials flag on the XMLHttpRequest
+
 ## abort
 
 Aborts an in-progress transfer. The onerror callback is passed a FileTransferError object which has an error code of FileTransferError.ABORT_ERR.
diff --git a/www/browser/FileTransfer.js b/www/browser/FileTransfer.js
index e142222..2146ed1 100644
--- a/www/browser/FileTransfer.js
+++ b/www/browser/FileTransfer.js
@@ -109,6 +109,7 @@ FileTransfer.prototype.upload = function(filePath, server, successCallback, erro
     var fileName = options.fileName || "image.jpg";
     var mimeType = options.mimeType || "image/jpeg";
     var params = options.params || {};
+    var withCredentials = options.withCredentials || false;
     // var chunkedMode = !!options.chunkedMode; // Not supported
     var headers = options.headers || {};
     var httpMethod = options.httpMethod && options.httpMethod.toUpperCase() === "PUT" ? "PUT" : "POST";
@@ -121,6 +122,7 @@ FileTransfer.prototype.upload = function(filePath, server, successCallback, erro
 
     var that = this;
     var xhr = transfers[this._id] = new XMLHttpRequest();
+    xhr.withCredentials = withCredentials;
 
     var fail = errorCallback && function(code, status, response) {
         transfers[this._id] && delete transfers[this._id];
@@ -222,6 +224,7 @@ FileTransfer.prototype.download = function(source, target, successCallback, erro
     options = options || {};
     
     var headers = options.headers || {};
+    var withCredentials = options.withCredentials || false;
 
     var basicAuthHeader = getBasicAuthHeader(source);
     if (basicAuthHeader) {
@@ -231,7 +234,7 @@ FileTransfer.prototype.download = function(source, target, successCallback, erro
 
     var that = this;
     var xhr = transfers[this._id] = new XMLHttpRequest();
-    
+    xhr.withCredentials = withCredentials;
     var fail = errorCallback && function(code, status, response) {
         transfers[that._id] && delete transfers[that._id];
         // In XHR GET reqests we're setting response type to Blob