add corsfilter and config xml to add CORS headerResponse