Removed misleading comment on CORS config boilerplate.