Trade item group related permissions inserted.
Bugfix - CORS OPTIONS is always anonymous, so no user context exists in that situation.
temporarily added HTTP request logging, should be moved to an external logging filter later.
code cleanups
code cleanups