I have a web service that I invoke from script but that does not need any information stored in cookies. Anytime I make a request to the service, the cookie is sent along with i
The withCredentials flag is needed to actually send cookies with cross-origin ajax calls.
See: https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/withCredentials
Setting it to false will prevent cookies from being sent.
With same-origin requests you will need to follow the other answers mentioned here.