Added configurable CORS header support in the AuthorizationServerFilter including responding to preflight requests for client-resource server Cross-origin resource sharing