adding cors filter exposing headers 

Signed-off-by: nickolayrusev <nickolay.rusev@gmail.com>