[2.x] Fix CORS annotation handling error in certain cases

[tjquinno]

Resolves #5094

Previously the CORS extension used a ProcessAnnotatedType observer tuned to @CrossOrigin to record the AnnotatedType instances with that annotation.

Then, later, a ProcessManagedBean observer would check to see if the AnnotatedType associated with the bean had been recorded earlier. If not, that observer would skip processing the bean.

But, if some extension had altered the AnnotatedType then the specific AnnotatedType instance passed to the PMB observer would not match the instance passed to the PAT observer (and recorded in the CORS extension's data structure). So the PMB logic would incorrectly skip the altered bean.

This PR removes the data structure and the PAT observer entirely. The extension now simply traverses each method of each managed bean, checking for the @CrossOrigin annotation and, if present, processing it.

Signed-off-by: tim.quinn@oracle.com tim.quinn@oracle.com