Allow tags to be set on security groups

Allow tags to be set on security groups. EC2 classic security groups do
not support tags; if you try to set them, your template/stack will fail.
Update CHANGELOG.md