CROS fix  - allow connect from all
Merge remote-tracking branch 'master/master'

Conflicts:
	src/main/security/MySavedRequestAwareAuthenticationSuccessHandler.java