Added better CORS details and a security considerations section.