add customized cors filter for tomcat 6