Spring Boot Security Allow All Cookies