Excluded the OPTIONS HTTP method from the security-constraints so pre-flight CORS requests don't get a 401 (this is needed when you run the AngularJS app from an another location than the WildFly Swarm app. For example, during development, I run the AngularJS app from my filesystem).
Second, I've fixed the configuration for the user 'paul', so you can now login with him as well.
Excluded the OPTIONS HTTP method from the security-constraints so pre-flight CORS requests don't get a 401 (this is needed when you run the AngularJS app from an another location than the WildFly Swarm app. For example, during development, I run the AngularJS app from my filesystem).
Second, I've fixed the configuration for the user 'paul', so you can now login with him as well.