Update notes for submitted changes

* Fix on CORS implementation. Added logic to discard same Origin requests. Implements: blueprint openid-oauth2-user-service