CORS servlet filter now processes requests ahead of the resources filters