Proposal. If security is present, pass withCredentials to a custom instance

[o-alexandrov]

Currently, orval ignores security being set either per route/method or globally.

Please let me know whether this should become an issue, instead of a discussion

[0-don]

so how do you set withCredentials by default