add documentation about cors changes fixes #170