remove polymer, move cors header process to filter