replacing our custom CORS filter with the transaction company's filter. fixes and closes #476.