Fix for TODO in CORS doc