Add HttpAuthenticationFilter
Add "Access-Control-Allow-Headers"
Cleanup