Added CORS filter (to add allow access header in response)