Clarify CHANGELOG

It didn't make it clear which URI caused 'OPTIONS *'.

Also updating previous bugfix message - it's not broken, it's now fixed.