Use Tomcat CORS filter