added configuration to send response of all jsps as utf-8
added CrossOriginResourceSharingFilter to allow XSS