You need to set withCredentials, if you want to pass cookies in the case of cross-domain.
withCredentials
editor.config.withCredentials = true