Add help block informing auto CORS for the app_domain setting