better doc and CORS filter for spring boot app