More CORS stuff
Add some documentation