Added filter to responses to allow CORS