fixing typo in CORS filter