robustified cors filter