added a CORS filter http://enable-cors.org/client.html so a gloseval can handle requests from any agentui client