The registration endpoint has cors handling for DELETE/POST;

Submitting 'bad' requests makes it explode already on the RESTEasy layer;

We need (eventually) something like an interceptor for all the CORS related things, including CORS on "bad requests" and error handling.