Support REST or SPA or Mobile request

[keepscoding]

Any plan to support these areas?

[rayronvictor]

+1

[jasper-lyons]

There are a few things that seem to be missing to be able to provide Ajax access for SecureSocial.

1. A response to the HTTP OPTION method.

2. Either out of the box support for CORS headers or documentation on how to implement a filter. (I'd vote for the second because CORS support is only required when the Auth API is on a different domain to the front end.)

If anyone can identify any other requirements to get this working, please comment. My self and my co-worker will be working to implement this and submit a pull request.