replace JSONP filter with CORS filter