Update crumb_cors_token_disclosure.md