added cors and hmac filter