j2ee7 rest cors example