add CORS headers filter
also commit changed pom.xml
Clean up CORS headers test cases.

Use an embedded HTTP server for running the filter rather than mocking
servlet request and response. Only mock what you own.

This also removes the dependency on Spring framework for it includes
mock implementations of http-servlet classes.
Delete redundant comments.