added CORS config to global after filter