web.xml for CORS support added