Allowing options thru Spring Security