Request: Add a note about CORS allowed headers to Request docs.

Also fixes #2494.

Thanks @5HT2A for reporting the docs problem and helping to debug and verify above mentioned issue.