add CORS filter and update dependencies