Beacon: fixed language re. "must honor http headers". removed reference to CORS

ResourceTiming: Use "resource" instead of "current page" in secureConnectionStart description