don't trample all over OPTIONS preflight requests if Basic Auth is configured
safely navigate the config in case spring security isn't installed
a couple simple tests
Merge pull request #16 from entagen/master

Prevent Basic Auth from breaking CORS OPTIONS preflight requests