Adding AccessControlAllowFilter to support cross-domain