Spring Boot Spring Security 5.7.3 - can't set Origin headers properly