docs($session) #784 - CORS documentation

[skip ci]