use dozer and groovys collectNested for suggestions
- CORS filter with Authorization header
- REST entry point introduced