443530 CrossOriginFilter does not set the Vary header