Add documentation on handling CORS pre-flights

As discussed at https://github.com/Pylons/pyramid/issues/1484. This would potentially save others whom are unfamiliar with the CORS standard hours of trial and error.
All feedbacks / improvements welcome.