Adjusting spring security to allow OPTIONS without authorization