fix jpa config
cors
allow all requested headers for CORS
maven tomcat plugin