cors filter for local cserver communication