Added section on Cross-Origin Resource Sharing

This addition is for the Optional section to help describe how to allow XSS (cross-domain) for API requests within browsers (e.g.: javascript).