adding cors-filter dependency to pom.xml

changing security-app-context.xml so security defaults to username
password