Add CORS filter to Spring Servlet for token requests