Allow credentials for CORS requests

Signed-off-by: William Brawner <me@wbrawner.com>

api/src/main/java/com/wbrawner/budgetserver/config/SecurityConfig.java

@@ -99,6 +99,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                                     .map(Enum::name)
                                     .collect(Collectors.toList())
                     );
+                    corsConfig.setAllowCredentials(true);
                     return corsConfig;
                 })
                 .and()