add notes about same origin policy and rawgithub.com