Add credential header support to CORS Filter

- Add credential header support to CORS Filter
- Correct logic to abort Spring Security Filter chain for OPTIONS
- Add CORS Filter parameter configuration to web.xml