make CORS filter default
fix shortName parsing for procedure's label