Adding a configurable AllowedMethodsFilter which allows all standard methods except TRACE and CONNECT by default. This is enabled on both the application servlet and admin servlet.