web.xml (CORSFilter - one last time:)