replaced CORS implementation by restful filter