Added missing drop table for URI generation.
Further CORS/auth tweaks. Removed OPTIONS from spring security.