added cors filter and login url interceptor