Add CORS understanding doc.