Made CORS-listener have a higher priority than AccessToken/Authenticate-listeners