Document how to enable CORS for certain routes only.