added CORS (from eBay https://github.com/ebay/cors-filter)

Change-Id: I2d6e4a2a05674936066f9060f861a638db624f7a