add servletFilter with CORS headers