Fix CORS, issue sonian/elasticsearch-jetty#40