Fixed CORS filter for KC admin resources