diff --git a/api/src/main/java/com/wbrawner/budgetserver/config/SecurityConfig.java b/api/src/main/java/com/wbrawner/budgetserver/config/SecurityConfig.java
index 50a3b59..ddafeee 100644
--- a/api/src/main/java/com/wbrawner/budgetserver/config/SecurityConfig.java
+++ b/api/src/main/java/com/wbrawner/budgetserver/config/SecurityConfig.java
@@ -99,6 +99,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                                     .map(Enum::name)
                                     .collect(Collectors.toList())
                     );
+                    corsConfig.setAllowCredentials(true);
                     return corsConfig;
                 })
                 .and()