pom.xml: use org.esup-portail:esup-smsu-api 2.0.0-RC1 from maven central
web.xml: cross-origin filter must never be used with default allowedOrigins "*" (otherise XSS/CSRF issues)

NB: cross-origin filter is commented by default
config.sample.properties: make it clear defaultSupervisorLogin need to be configured
add ui-bootstrap-custom-tpls-0.10.0 js, built with only typeahead