Added Java CORS that does not fully work