add doctape to "APIs that support CORS"