Added filter that sets CORS header to allow requests from any origin.