use custom CORS filter
replace with example