add offset 0
enable security:debug
add 401FailureHandler
change basic-login to form-login
Move CORS to Spring Security
Add javaee6 api dependency(used in compile)
Add Response Code successful handler
Access-Control-Allow-Credentials