Investigate withXSRFToken config option

[mrlubos]

ferdikoomen/openapi-typescript-codegen#2067

I'd like to investigate whether we're not forcing our users to use a vulnerable setting, need to check why Axios made that change ferdikoomen/openapi-typescript-codegen#2063 (comment)

[jordanshatford]

This can now be done with interceptors:

The use case in the linked PR would look something like this:

OpenAPI.interceptors.request.use((request) => {
  request.withXSRFToken = request.withCredentials
  return request
})

OR

OpenAPI.interceptors.request.use((request) => {
  request.withXSRFToken = OpenAPI.WITH_CREDENTIALS
  return request
})

[mrlubos]

This will be solved with client packages #308