fixes #2 Add CORS support with cxf CORS