OO-615: implements a simple filter to allow CORS (cross origin resource sharing) but restricted to the rest api