You can use Winjs.xhr for the call. Make sure defaultWindowsCredentials are set in appxmanifest (as you said they are).
Sample usage:
WinJS.xhr({
url: requestUrl, user: 'username', pass: 'password, headers: { accept: 'application/json'}
}).then(
function (req) {
var data = JSON.parse(req.response);
document.getElementById('foo').innerHTML = data.d[0].;
// Now call the user-supplied callback function when this data is ready
c({
results: data.d,
number: data.d.length
});
}, //Error func
function (req) {
e(req);
}, //progress func
function (req) {
p(req);
}
);
You could also user a c# project to take care of WCF communication and have the Javascript project cal it's methods.
Other authetication paths:
The Windows.Security.Authentication.Live "Enables Metro style apps to use Windows Live to authenticate users using their Windows Live ID"
Also take a look at Metro style app for banking: code walkthrough with several authentication scenarios and to Web Authentication.
Live SDK Developer Preview will lso enable you to "Take advantage of single sign-on scenarios using Windows Live ID in Windows Developer Preview".