Considerations for CORS requests on the browser

Explained why it may be necessary to use Access-Control-Expose-Headers when making CORS requests using Hawk.