Fix CORS

* Set the Authorization Header
* Set data for OAuth Token Request
* CORS Filter if OPTIONS do not continue FilterChain and set status
* Use RequestMapping instead of RestController to map URL prefix (RestController(value) maps a bean name not URL)