add CORS filter for Jetty