fixed build of stand-alone WAR
added CORS filter [allow:*]