Extract out CORS headers into filter.