Add http OPTIONS request handling to rest controller. Introduce Location...

...Listener so the Location header is always properly set. Allow UserAbstractFactory to call authenticate if a user is not found.