Fix session handling

Author: Sporiff

src/main/java/org/openpodcastapi/opa/config/SecurityConfig.java

@@ -48,7 +48,7 @@ public SecurityFilterChain defaultSecurityFilterChain(HttpSecurity http) throws
         http
                 .csrf(csrf -> csrf.ignoringRequestMatchers("/api/**", "/docs", "/docs/**"))
                 .sessionManagement(sm -> sm
-                        .sessionCreationPolicy(SessionCreationPolicy.STATELESS)) // Stateless session
+                        .sessionCreationPolicy(SessionCreationPolicy.IF_REQUIRED)) // Stateless session
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers(publicPages).permitAll()
                         .requestMatchers(publicEndpoints).permitAll()