updating web.xml, adding cors support