Update CORS reference (closes #30)