Fixed CORS filter to allow content type header