fix conflict between CredentialsValidator and CORS filter