improved documentation with CORS information