Exclusion from cors-filter of servlet-api 2.5 version to avoid conflict with 3.0X