- enable CORS for localhost calls - add Filter to allow API calls that can select Documents without any tag