Changed CORS handler interceptor to servlet filter and support OPTIONS.