diff -r af4a54a78ba6 -r 8ad1734d9d8a server/src/main/webapp/WEB-INF/web.xml
--- a/server/src/main/webapp/WEB-INF/web.xml	Thu Jun 05 18:15:52 2014 +0200
+++ b/server/src/main/webapp/WEB-INF/web.xml	Thu Jun 12 16:27:35 2014 +0200
@@ -41,21 +41,13 @@
     <init-param>
        <param-name>ws.bufferSize</param-name>
        <param-value>100000</param-value>
-    </init-param>        
+    </init-param>
     <load-on-startup>1</load-on-startup>
   </servlet>
   <servlet-mapping>
     <servlet-name>cometd</servlet-name>
     <url-pattern>/cometd/*</url-pattern>
   </servlet-mapping>
-  <filter>
-    <filter-name>cross-origin</filter-name>
-    <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
-  </filter>
-  <filter-mapping>
-    <filter-name>cross-origin</filter-name>
-    <url-pattern>/cometd/*</url-pattern>
-  </filter-mapping>
   <servlet>
     <servlet-name>admin</servlet-name>
     <servlet-class>org.coweb.servlet.AdminServlet</servlet-class>
@@ -99,4 +91,13 @@
       <filter-name>springSecurityFilterChain</filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>
+  <filter>
+    <filter-name>cross-origin</filter-name>
+    <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
+  </filter>
+  <filter-mapping>
+    <filter-name>cross-origin</filter-name>
+    <url-pattern>/cometd/*</url-pattern>
+    <url-pattern>/rest/*</url-pattern>
+  </filter-mapping>
 </web-app>