CORSFilter to handle preflight requests