added CORS
fixed jetty-servlets verion
fixed CORS allowed headers
fixed jetty-servlets verion