more CORS-enabled resources 

"/documents/*",
"/resources/*"
"/*.svc/*"

Change-Id: Ib0f650d5e78cc80e78886b395b6ccaa4a45407d5