- Add credential header support
- Correct logic to abort Spring Security Filter chain for OPTIONS
- Add CORS Filter parameter configuration to web.xml