Improved CORS docs