Adjusting spring security to allow OPTIONS requests through authorization