updated docs, added CORS example