When HttpExceptionMapper catch a 401 for instance and that we are in CORS, the CORS headers are not added to the Response : the consequence is that the client is not receiving a proper 401 response (In chrome for instance : the console says : request has been cancelled).
This could be an fix https://github.com/aerogear/aerogear-push-quickstart-backend/blob/master/src/main/java/org/jboss/aerogear/aerodoc/rest/CorsExceptionHandler.java