created a very simple CORS servlet filter