use CORS on note creation

so that we can post to the create note action from any website
remove unneeded bookmark page after implementing CORS on note create