Refactored initCORS method name.
Version 0.0.11 - Custom Security

Removed Passport.
Super now expects an _authorize method to be implemented on a authorization controller, typically named User.
Moved middleware init functions to the initMiddleware method, which can be overridden.