CORS filter fails to fall back to annotations on entire class when it fails to find one for the specific method

For a preflight request, if the annotation is not present on the target method or an @OPTIONS method, the code should look at the service class. It does not.