adding cors filter for all resource requests